WIP: added second action to the installation of the gitlab pacakge to lock the version for dist-upgrades

Idea is to add a lock action (apt-get hold) so that updates may be run without worry.

mentioned in issue gitlab-com/infrastructure#2494

assigned to @ilyaf

This will break because of options '--force-yes' below, I'm looking for a solution to this.