Add pull_policy: always, matching wisp/keep's convention

Missed when the admin-panel work copied wisp's docker-compose.yml
pattern. Without it, `docker compose up -d` won't re-pull a new
:latest image if a container with the old one is already running —
the host's bulk deploy script (docker compose up -d per project, no
explicit pull step) would silently leave this project stale on every
redeploy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docker-compose.yml

@@ -2,6 +2,7 @@ services:
   app:
     image: ${IMAGE}
     restart: unless-stopped
+    pull_policy: always
     ports:
       - "${PORT:-3035}:3035"
     environment: