Reintroduce `cabal update` as ghc user
Previously 26975eeb attempted to optimise the build by unifying the `cabal update` invocations. However, this optimisation is in fact wrong. We must run `cabal update` twice: once as root to build the bootstrap tools and again as the ghc user (which will be used by downstream GHC builds).