Add script to detect needed package updates from Debian

In past it was often overssen, that a new APT snaptshot should have meed taken or that the forked package should get an update. This script returns a list of packages, that are not in sync with Debian.

Closes #14728 (closed), #16375 (closed)