Automate JJB update

[jlebon]

We shouldn't waste human cycles on running make update whenever the jjb changes. Let's just have a service job that does this for us. It shouldn't be very hard, we just need to make sure credentials are handled safely.

[cgwalters]

Or try converting to jenkins pipeline or something?