CI: have make update as an extra pipeline stage

This should allow later build jobs to share the downloaded artifact,
altough initially lowering the parallel efficiency, as downloading
occurs only on one runner at the same time.

But let's hope that slowdown is outhweighted by not all runners having
to download the same stuff.