Fix missing nsenter for wrap script

Since the Dockerfile in the root only adds the bootstrap script to
the image, `cp ./vendor/nsenter ...` fails because vendor was not
copied in.  This change just downloads nsenter from the agent-binaries
release.