kubelet: only check for container listed in the manifest

also wait 1 x retryDelay before polling state after syncing to prevent detecting a container that fails immediately as running.

/cc @dchen1107