test: retry image pulls that happen inside a test

A pull issued inside a test goes through CRI-O rather than copyimg, so
the retries added in #10081 do not cover it, and a transient registry
failure fails a test that CRI-O handled correctly.

Wrap those pulls in the existing retry helper. The ten `run ! crictl
pull` assertions keep calling crictl directly, so an expected failure is
not retried three times before the test can assert on it.

crictl_pull re-emits the stdout that retry captures, because three call
sites parse the pulled reference out of it.

Assisted-by: Claude Code <noreply@anthropic.com>
Signed-off-by: Sourav Moitra <sourav.moitr@gmail.com>