jenkins: put package on hold to avoid premature upgrades