Make pacman system upgrade optional

Split upgrade and refresh options when installing a pacman package.

refresh option control pacman -Sy
sysupgrade option control pacman -Su

Important note: refresh=True no more upgrade your whole system.

Linked to this: https://github.com/saltstack/salt/pull/10519/
Allow pacman upgrade to don't refresh the database

The default behavior is still to refresh before upgrade.
Fix broken hg.pull CLi example, Fix #10477
Remove "upgrade instructions" wording for releases index.rst, Fix #10482
small DRY refactor of joiner and joinent transactons
rnamind in stack
support additional kwargs to lvcreate
support additional arguments for lv_present
Add minimum version for apache-libcloud
A glossary.
security: remove race between bind(2) and chmod(2)

This adds umask(2) calls before and after zmq_bind(3) calls.
Also while here check sockets with salt.utils.check_ipc_path_max_len()
and removed executable permissions from sockets.

PS. This is proper version of #10442
Add salt.utils.strip_proto()
gitfs: replace refs to _strip_proto()

Also a bit of variable name cleanup
gitfs: remove emptydirs collection logic

Git cannot have empty dirs. This logic is unnecessary.
Add hgfs mountpoints and per-remote params
Add new hgfs features to docs
Add environment to file state error

Just a little enhancement to error reporting.
Lint fix

Remove extra line (See below link for more info)

http://jenkins.saltstack.com/job/salt-pr-lint/1333/violations/file/salt/utils/__init__.py/
Fix sphinx build warnings/errors
Deprecate `salt.cloud-libcloudfuncs.libcloud_version` unil Salt Helium.

Instead use `salt.cloud-libcloudfuncs.check_libcloud_version`.
use the same grant normalization for GRANT and REVOKE, and allow ALL PRIVILEGES