explicitly pull the latest docker image in jenkins (#3760)

* explicitly pull the latest docker image in jenkins

Right now we don't need to do this since the same jenkins instance that
builds the images and tags them also pushes them, so it is guaranteed to
always have the latest. However, if we want to add another docker
builder that is no longer true, so let's always pull

* mos(t) def

* also this one
2 files changed