🔧 chore(apps): set the pull policy for all services using fixed tag images

- add `pull_policy: always` to all service definitions across all docker-compose files
- ensure consistent image update behavior for all applications
- maintain existing network configurations and external network settings
- preserve all other service configurations and environment variables

apps/tailscale/latest/docker-compose.yml

@@ -24,5 +24,6 @@ services:
       - TS_USERSPACE=${TS_USERSPACE}
       - TS_EXTRA_ARGS=${TS_EXTRA_ARGS}
     image: tailscale/tailscale:latest
-    labels:  
+    pull_policy: always
+    labels:
       createdBy: "Apps"