chore: separate updatecli to its own pipeline

[lemeurherve]

This PR separates updatecli to its own pipeline, taking in account #606 (review) and using the new updatecliAgentLabel option of the updatecli shared pipeline function to use a Docker agent for running updatecli.

Supersedes and closes #606

Follow-up of:

• chore(infra.ci): separated updatecli pipeline for packer-images kubernetes-management#3855

Ref:

• Updatecli: Use separated pipelines + organization scanning for all updatecli processes in jenkins-infra helpdesk#2778

[dduportal]

pipelineTriggers([cron('@daily')]), is already set up in the main pipeline (so we don't loose it) and checks are 👍 so 🚀