Update to 1.16.99.5

Changes:

• allow to execute programs from lua script and triggers
• fetch vuln.xml.xz by default
• triggers detected by pkg -r are now deferred for firstboot
• pkg triggers command can be executed at first boot to run the deferred triggers

Note this is expect to be the last release before 1.17 (depending on
how many new bugs has been introduced)