Add option to pin packages with "apt-mark hold"

Sometimes I am struggling with some packages having unexpected side effects after an update. Example: Docker changed it's minimum API version after updating to version 29.

It would be very nice, if I could pin package versions (with apt-mark) on my machines, until I am ready to update.