DockerImageTarget with pull=True should fail gracefully

[adamdoupe]

It's often difficult to know if a docker image is a local target or from a registry, and therefore we don't know when to set pull=True.

pull=True should fail gracefully if it's unable to pull, in case it's a local docker image.