Implement new sidecar

[ponyisi]

@ivukotic has a sidecar implementation that doesn't use back-and-forth pinging with nc but instead uses curl to pull work packages into the science image. Switch to this as it should be more robust and requires fewer packages injected into the science images.