Add imagePullPolicy: Always to all deployments and jobs

This commit ensures all container images are pulled fresh on every deployment,
which is essential for testing latest builds and CI/CD workflows.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: sallyom

components/manifests/backend-deployment.yaml

@@ -18,6 +18,7 @@ spec:
       containers:
       - name: backend-api
         image: quay.io/ambient_code/vteam_backend:latest
+        imagePullPolicy: Always
         ports:
         - containerPort: 8080
           name: http

components/manifests/frontend-deployment.yaml

@@ -17,6 +17,7 @@ spec:
       containers:
       - name: frontend
         image: quay.io/ambient_code/vteam_frontend:latest
+        imagePullPolicy: Always
         ports:
         - containerPort: 3000
           name: http

components/manifests/operator-deployment.yaml

@@ -18,6 +18,7 @@ spec:
       containers:
       - name: agentic-operator
         image: quay.io/ambient_code/vteam_operator:latest
+        imagePullPolicy: Always
         env:
         - name: NAMESPACE
           valueFrom:
@@ -27,6 +28,8 @@ spec:
           value: "http://backend-service:8080/api"
         - name: AMBIENT_CODE_RUNNER_IMAGE
           value: "quay.io/ambient_code/vteam_claude_runner:latest"
+        - name: IMAGE_PULL_POLICY
+          value: "Always"
         resources:
           requests:
             cpu: 50m

components/operator/main.go

@@ -27,6 +27,7 @@ var (
 	dynamicClient          dynamic.Interface
 	namespace              string
 	ambientCodeRunnerImage string
+	imagePullPolicy        corev1.PullPolicy
 )
 
 func main() {
@@ -47,6 +48,13 @@ func main() {
 		ambientCodeRunnerImage = "quay.io/ambient_code/vteam_claude_runner:latest"
 	}
 
+	// Get image pull policy from environment or use default
+	imagePullPolicyStr := os.Getenv("IMAGE_PULL_POLICY")
+	if imagePullPolicyStr == "" {
+		imagePullPolicyStr = "Always"
+	}
+	imagePullPolicy = corev1.PullPolicy(imagePullPolicyStr)
+
 	log.Printf("Agentic Session Operator starting in namespace: %s", namespace)
 	log.Printf("Using ambient-code runner image: %s", ambientCodeRunnerImage)
 
@@ -260,8 +268,9 @@ func handleAgenticSessionEvent(obj *unstructured.Unstructured) error {
 
 					Containers: []corev1.Container{
 						{
-							Name:  "ambient-code-runner",
-							Image: ambientCodeRunnerImage,
+							Name:            "ambient-code-runner",
+							Image:           ambientCodeRunnerImage,
+							ImagePullPolicy: imagePullPolicy,
 							// 🔒 Container-level security (SCC-compatible, no privileged capabilities)
 							SecurityContext: &corev1.SecurityContext{
 								AllowPrivilegeEscalation: boolPtr(false),