Add safe-upgrade step and remove clean step...

...because wercker runs `apt-get [clean|autoclean|autoremove]` for us at
the end of each deploy.
Add some keywords.
Bump.