agent: prefix container names with a namespace
agent: reap unwanted containers

Regularly list all running containers in the agent namespace and kill
the ones that are not recognized as being managed by the agent.
agent: reaper: get active set after candidates

Get the active set after enumerating containers in namespace to avoid
false positives.
Merge pull request #19 from spotify/dano/container-gc

agent: reap unwanted containers