ch-image pull: validate it works with Amazon public registry