kubelet: only check for container listed in the manifest

also wait 1 x retryDelay before polling state after syncing to prevent detecting a container that fails immediately as running.

/cc @dchen1107 
Added a TODO in dockertools to build the key and do a map lookup instead.