Returns the primary Docker network for a running container, preferring cfc-network
or any network whose name contains cfc (e.g. compose project networks).
Removes emulator-owned workload containers left behind when their LocalStack
control plane has been stopped. Names are filtered in-process rather than
passed as a Docker wildcard so unrelated containers are never targeted.
LocalEmulatorDefaults.GATEWAY_PORT