Move apt.compile_time_update from template to cookbook

This allows it to be overridden, if necessary. Another cookbook can set `override['apt']['compile_time_update'] = false` to override.