Change default imagePullPolicy to IfNotPresent

This makes the pods less vulnerable to failure when the container registry is unreachable for any reason.

I modified the HELM_VALUES_FILE of the QA environment to have imagePullPolicy: Always, so we can still deploy multiple times from a feature branch (which always has the same image tag).