move apt-get update / upgrade out of shell script, into ansible
use ansible to keep home-brew (itself, not packages) up to date