remove Destroy from Container, add Start

Something else creates it, so that something else should destroy it. Also
added Start for symmetry with Stop.
add ContainerPool

Creates and destroys Linux containers by shelling out to create.sh/destroy.sh.

Added CommandRunner and FakeCommandRunner for faking out commands in tests and
asserting against the commands that were run (and their order).