fix(docker): fail closed on bottle enumeration

tests/unit/test_backend_secret_reprovision.py

@@ -262,6 +262,14 @@ class TestDockerAttachPrimitives(unittest.TestCase):
             with self.assertRaises(FileNotFoundError):
                 docker.running_agent_containers()
 
+    def test_running_agent_containers_fails_hard_on_inspect_failure(self) -> None:
+        inspect = _proc(1, stderr="network unavailable")
+        with patch.object(docker, "run_docker", return_value=inspect):
+            with self.assertRaisesRegex(
+                docker.InfraLaunchError, "network unavailable",
+            ):
+                docker.running_agent_containers(network="net")
+
     def test_push_ca_cp_then_rebuilds_trust_store(self) -> None:
         with patch.object(
             docker, "run_docker", side_effect=[_proc(), _proc(), _proc()],