cloudformation: add disable_updates option

Cloudformation updates can be destructive. In certain cases, it is nice
to be able to ensure that a stack will never be accidentally updated.