[agent] unconditionally pull when starting a container

So if the image should change, you'll get the changed container.
If nothing has changed, it's still pretty cheap since docker will
only fetch the tags file from the registry.