Function detect_restart_loops 

pub fn detect_restart_loops(
    containers: &[Container],
    threshold: u64,
) -> Vec<Anomaly>

Detect restart loops: containers with restart_count >= threshold.