Use finalizers to support runner-unregistration

[davidkarlsen]

Avoid actions/runner#752 by adding finalizer to the pod.
This helps doing unregistration from the controller rather than by each pod.
Ultimately this will support achieving #75 in order to avoid exposure of tokens with high privileges to the runners/pod.