🔧 chore(apps): set the pull policy for all services using fixed tag images

- add `pull_policy: always` to all service definitions across all docker-compose files
- ensure consistent image update behavior for all applications
- maintain existing network configurations and external network settings
- preserve all other service configurations and environment variables

apps/icat_lite/latest/docker-compose.yml

@@ -1,6 +1,7 @@
 services:
   icat_lite:
     image: "bluesdo/icat_lite_public:latest"
+    pull_policy: always
     container_name: ${CONTAINER_NAME}
     restart: always
     networks:
@@ -16,6 +17,6 @@ services:
     command: "serve.js --host 0.0.0.0 --port 8095 --dbHost ${PANEL_DB_HOST} --dbPort ${PANEL_DB_PORT} --dbName ${PANEL_DB_NAME} --dbUser ${PANEL_DB_USER} --dbPassword ${PANEL_DB_USER_PASSWORD} --pwdKey ${ICAT_PWDKEY} --cookiePwd ${ICAT_COOKIEPWD} --alterAll"
     labels:
       createdBy: "Apps"
-networks:  
+networks:
   1panel-network:
-    external: true
+    external: true