Split off update part

Currently the updater is part of the image.
However we may want to compute the update on a different machine.
The Update-Container would then provide new files either through a shared directory or solely as a download (or both which is the current setup).
Additionally we could shutdown the update container without interrupting our service.