don't docker pull before docker run

Since 'docker run' automatically pulls when the image doesn't exist locally, I think it's safe to remove explicit 'docker pull' before 'docker run'. Without 'docker pull', we won't update the local image with the remote image (for the same tag) but it shouldn't be a problem in prod that the unique tag is assumed for each released version.