🔧 chore(apps): set the pull policy for all services using fixed tag images

- add `pull_policy: always` to all service definitions across all docker-compose files
- ensure consistent image update behavior for all applications
- maintain existing network configurations and external network settings
- preserve all other service configurations and environment variables

apps/hexo/latest/docker-compose.yml

@@ -15,11 +15,12 @@ services:
       - GIT_USER=${GIT_USERNAME}
       - GIT_EMAIL=${GIT_MAIL}
     image: bloodstar/hexo:latest
-    labels:  
+    pull_policy: always
+    labels:
       createdBy: "Apps"
 volumes:
   hexo_data:
     name: hexo_data
-networks:  
-  1panel-network:  
+networks:
+  1panel-network:
     external: true