add secure POOL file to non-local workflow builds

also fixes all downgrade containers running on any local build

needs pipeline build testing

This file is required to be in the workflow container after the HTC23 upgrade. KScott has been manually adding it to test and dev for us until now.