agent: reap unwanted containers

Regularly list all running containers in the agent namespace and kill
the ones that are not recognized as being managed by the agent.