Security update as well update to the latest version

Fixed CVEs:
CVE-2018-18836
CVE-2018-18837
CVE-2018-18838
CVE-2018-18839

There is no more Install commands for pkglists alone because it is
dependency of updater-ng-supervisor and that is dependency of
foris in proxy. This means that Foris it self pulls pkglists in.

- created backport folder
where we are going to put backports from OpenWrt

- updated Jinja2 to version 2.10
it requires Foris

This reverts commit 9dda18ba.

It was dropped so I reverted commit that dropped it but to have medkit
faster I am dropping usage of it here.

This commit should be reverted as soon as psmisc is build in repository!

Exported variable can't be local!

This creates lists that can be included in to each other. This is done
by hack that original script calling one of these lists passes base URI
to access sources and that is later reused. This is how relative URI
should work in future but it is not completed now so we can overcome it
this way and have almost same support.

This also means that we no longer have to specify target branch for
lists because it no longer matters.

Fallback branch is for now dropped because we are not doing small build
at the moment. We should in future return to them but they will be
implemented differently then fallback branch is.

This also does some base list cleanup.

This is no longer needed and we have datacollect list instead for this.

This reverts commits e4b0114f and
2370e174.

Those are only needed in master.

This reverts commit 9a6dbcd5.

Only in master

This reverts commit 10ba166e.

It is in master, not in released branch