updater-ng: Some resilience improvements

• Ability to remove a stuck lock file
• Timing out of sub-commands if they take really long time
• Generate a „random“ time when the updater is run from cron

See turris/updater#87. Also, there's a related merge request turris/updater!74.