Add support for manipulating namespaces directly

If the supplied guest name matches the name of an existing namespace, skip
container name lookup and work with the network namespace directly. Group
all container lookup code to be in the same place.

Rename NSPID variable to NS to reflect the greater generality.