controller to roll pods that are not injected but should be

Nobody has claimed this yet.

## Feature Request

One the the challenges of using Linkerd auto-injection is dealing with silent failure. How about taking the K8s approach of controllers that continuously work to achieve a target state? In this case, I suggest a controller the continuously scans all pods and namespaces with the linkerd injection annotation. When the controller finds a pod that has the annotation but does not have the proper linkerd sidecar, it restarts the pod.

The alternative to this is some set of alerts that each client must hand craft and then respond to.

One could make this controller an optional component.

No files, tests, or entry points are named. Start by reviewing Linkerd's existing injection and Kubernetes controller architecture, then define the scope for detecting annotated pods without the expected sidecar and restarting them. Done would require an agreed optional controller design, behavior, and validation plan.

Written by the indexing model from the issue text.