WordPress plugin to disable auto-updates.
Drop disable-autoupdate.php into your wp-content/mu-plugins folder.
You can also put it into the regular plugins folder, but then it will need to be activated manually in the CMS, and likewise can be deactivated through the CMS.