Fix inconsistent state when podagent is down

This fixes some cases (but not all) where there can be an state between what the annotations describes and what CNI have actually been run.