crane: add pull command.

want to be able to pull rather than build (which is what provision will do if
a Dockerfile was specified).