define a way to auto-upgrade environments

[clux]

Currently we auto-pull images when needed, but we have no way of forcing another pull when an old container is there. This causes misc build issues when people forget to do it for a while when someone adds something new.

There should be a way to set lastImageDate or something in the manifest so that when people make breaking changes, it is there along with the repo it breaks. lal build could then do an image upgrade check.

[bencord0]

This could be solved by upstream docker, and we just depend on the behaviour.
moby/moby#34394

I don't really see a good reason to not have this always enabled. If someone breaks a "latest" tag (and you hard depend on it), there's no way to unbreak yourself without proper change coordination anyway.