Dockerfile: make sure to upgrade after updating

Although apt-get update was called, upgrade did not follow it. This
lead to the strange situation of keeping some ROS packages at the
versions ineherited from the original image and some being the latest
ones.