Update main.yml

Added unattended-upgrades tag, so I could run that on s135.