Agent should log other container statuses

[benmoss]

If we give the agent access via rbac to its own pod, it can use the Kubernetes API to query the status of other containers in its pod. This would let us log container configuration errors, like missing secrets/configmaps, or image pull errors.

This might mean the agent takes a dependency on client-go.