add ability to pull images via engine

This enables pulling the latest image to an engine.  Use case: deploy an updated image without interrupting service (for example with a container that has specified ports).