Add `apt`, configure `unattended-upgrades`

This pull request:
- adds the [puppetlabs/apt](http://forge.puppetlabs.com/puppetlabs/apt) module
- configures the apt module to use unattended-upgrades
- configures the apt module to send exceptions to machine.email@digital.cabinet-office.gov.uk