Add a in container exec based health check.

Why not just look at exit code and treat 0 as success?  That is the same semantic we will have for "run until completion".  If exit code != 0, save all stdout/stderr as payload.