The watch process that used up every file descriptor
Starting the dev watcher over and over across a long session, and never killing the old ones, filled the machine's file descriptor table. The thing that fell over first was Docker, which had not done anything wrong.