NEOS_APP_FORCE_PULL set to false by default

This is probably better idea. Often people might use it with default Base distribution and they will provide tag name, not a branch. In that case the pull will fail and the container will be unable to start.
vhost: www redirect to non-www version
doc update