Add task to run unattended-upgrades

The task always runs unattended-upgrade in debug mode. To do a dry run pass `dry-run` as an argument.