r/minio: Do not pull images automatically

We don't want `podman` pulling a new container image and updating
without our concent.  The image will already be there on the first
start, since we pulled it in an Ansible task.

roles/minio/templates/minio.container.j2

@@ -1,11 +1,12 @@
 [Unit]
 Description=MinIO Object Storage
-Wants=network-online.target
-After=network-online.target
+Wants=network.target
+After=network.target
 RequiresMountsFor={{ minio_storage_path }}
 
 [Container]
 Image={{ minio_container_image }}:{{ minio_version }}
+Pull=never
 Exec=server {% if minio_address|d %}--address {{ minio_address }} {% endif %}/data --certs-dir /certs
 User=224
 Group=224