Run `apt upgrade` to pull updates to the base packages

The -security and -updates repositories may ship updates to
already-installed packages, so make sure they get pulled in
when adding the new APT source entries.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>