Returns the primary Docker network for a running container, preferring cfc-network
or any network whose name contains cfc (e.g. compose project networks).
Removes emulator-owned workload containers left behind when their LocalStack
control plane has been stopped. Names are filtered in-process rather than
passed as a Docker wildcard so unrelated containers are never targeted.
Whether uri answers with any HTTP response at all -- unlike isHttpHealthy(URI),
a 4xx/5xx still counts. For a plain reverse proxy (the emulator edge) with no default vhost,
an unmatched request 404s the moment nginx itself is up and serving, before any application
route has been reconciled in; requiring 2xx there (as isHttpHealthy does) reports the
container unhealthy indefinitely on a cold start with nothing deployed yet, even though it's
already serving traffic correctly.
LocalEmulatorDefaults.GATEWAY_PORT