agent: validate config on create

- validates config when create() is called
- extract some methods from create
- drops embedded libcontainer config from realContainer (only needed to persist once to disk)
- fixes a bug: port environment variables were previously available for command-line argument expansion, but not actually set in the processes environment.

/cc @jmyounker @peterbourgon