[images] Pre-install update package

This change includes the update package in the blobfs image and
the dynamic index. This has a few benefits:

 * The merkle root of the update package is currently the best indicator
 of the OS version since it includes references to the kernel images,
 all monolith packages, and the system_image package. Without
 requiring it to be present, the system cannot reliably use it as the OS
 version.

 * If an OTA attempt needs to download the update package, it assumes it
 needs to apply the kernel image, causing the first OTA attempt after a
 pave to always reboot, even if the kernel hasn't changed.

 * The end result of an OTA and a pave are more consistent. The update
 package will always be present after an OTA, and it will now be present
 after a pave as well.

Test: pave, OTA, verify update does not download blobs or reboot
Change-Id: I290526bb7208ce4f549c4660677e29b512c92a98
1 file changed