Cleaning up container ID handling inside kubelet

This touches a lot of stuff, so I'd appreciate a careful review & comments!

In  another PR, I'd like to improve the /containerInfo and /containerStats interface. I maintained the previous behavior of passing a manifest/pod id (which really ends up being a substring match in the mangled docker name!). This seems to fall short since a manifest/pod can container multiple containers.
FYI: Once I get the validation change in (just need to finish tests) we can change "--" to "_" which feels a lot less kludgey :)