Prevent WT_RESTART from being returned to API calls

It's possible that WT_RESTART (an internal error code) can be returned to an API call. See BF-18442, where it appears to be returned from either WT_CURSOR->next or WT_CURSOR->prev.