Configure OCS to always pull the latest version of the trivy-k8s-wrapper image.

trivy-k8s-wrapper now has a nightly release that updates the base image daily.

Currently, the image pull policy is set to ifNotPresent meaning the image isn't pulled if it's already present. By changing image pull policy to Always, we can ensure that the latest image is pulled every time an OCS scan is performed.