use ensure_resource() for update in distribution.pp, make suite in update optional

* several distributions may define the same update target; release is used accordingly by reprepro
* an update definition does not necessarily have to be limited for a specific suite