Enable more upgrades for unattended-upgrades

Important packages like the kubelet and the container runtime are marked as "hold", so there shouldn't be problems with this. However it might cause interruptions if services get auto-restarted (e.g. libc upgrade).