Ye olde multimaster_experimental had a nice way of handling this (I think they used this for the pr2 as well). It consisted of
- A script, rosget that helps you install debs with a name of
ros-*.
- Configuration for passwordless use of
rosget in /etc/sudoers
- There is also some code in the exchange part of ye olde app manager by Ken & his team.