Add a rate limiter, use it to rate limit docker pulls.

nit iff you do another push: goroutine