boltcms conflicts with the thunderbolt device manager

See: kaniini/secfixes-tracker#1

The aports package is 'go-protobuf'

See: kaniini/secfixes-tracker#5

These are jenkins plugins that all belong to the 'jenkins' package

These are virtual packages, and so can never have vulnerabilities

This gives more visibility in the settings and makes it easier to
automatically deploy changes.

Shared config between the application and cron container is extracted
and included with yaml anchors.

For consistency