Container exclusion

• Fixed host networking constraint
• Removed deprecated constraint templates
• Added excluded resources for all templates
• Added label to controller to force pod re-roll so constraint templates are updated before post-upgrade hooks call constraints.

Related to #103 (closed)