Allow pulls from an insecure registry

We maintain a private docker registry without SSL (it isn't necessary). This PR adds an `-i` option to `fig pull` that enables insecure mode.