agent: reap unwanted containers

Regularly list all running containers in the agent namespace and kill the ones that are not recognized as being managed by the agent.