Add a in container exec based health check.

nit for followup: Comment, and include that these must all be called BEFORE the first call to NewHealthChecker (or we race)