updater-ng: Some resilience improvements

• Ability to remove a stuck lock file • Timing out of sub-commands if they take really long time • Generate a „random“ time when the updater is run from cron

This is related to turris/updater#87. Also, there's a related merge request turris/updater!74.