Add option for docker build --pull

[dboreham]

Perennial issue where docker uses whatever old version if a base image is on the local machine.

Turns out there is a flag --pull for docker build that does the right thing.
We should either enable it for our --force-rebuild, or add a new explicit flag.