explicitly pull the latest docker image in jenkins (#3760)

* explicitly pull the latest docker image in jenkins

Right now we don't need to do this since the same jenkins instance that
builds the images and tags them also pushes them, so it is guaranteed to
always have the latest. However, if we want to add another docker
builder that is no longer true, so let's always pull

* mos(t) def

* also this one
diff --git a/Jenkinsfile b/Jenkinsfile
index 3492b54..c7710d6 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -306,7 +306,9 @@
             builders[combinedName] = {
                 node(label) {
                     stage(combinedName) {
-                        docker.image(imageName).inside {
+                        def buildImage = docker.image(imageName)
+                        buildImage.pull()
+                        buildImage.inside {
                             build(toxenv, label, imageName, artifacts, artifactExcludes)
                         }
                     }