kubelet: only check for container listed in the manifest

also wait 1 x retryDelay before polling state after syncing to prevent detecting a container that fails immediately as running.

/cc @dchen1107 
Ack, no good reason. I think I started writing this assuming it was a slice and just forgot to simplify. Thanks!