Decouple image pulling from the CLI

[dmjb]

Right now, image pulling happens inside the run command of the CLI. This logic needs to be lifted out so that it can be shared across different users of the workload interface.