Add a rate limiter, use it to rate limit docker pulls.

I'd still do `time.Second/qps` here.  I think that is more robust and clearer.