software anti-rollback epoch mechanism

[morlandi7]

A software anti-rollback epoch mechanism implemented by update_server using an epoch stored in the caboose needs to be implemented. A well-behaved update_server would refuse to update and/or enable an image with an epoch numerically lower than its own.

see #1127
related #1569
possibly could be solved by #1366