add pull command that just refreshes images without starting containers

so that you can do all the slow pulling without a concurrency limit (no --concurrency argument) and then rolling restarts with limited concurrency