test(issue-23): the generated-shim pin moves to the real-server leak fix (525df2b)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VCgu9Fa9iT7TbJUSzdq4Ff

tests/test_issue23_24_startup_path.py

@@ -298,9 +298,11 @@ def test_s11_this_branch_does_not_change_the_generated_shim(mam_sandbox):
     byte-identical to base is what makes "the control plane is not modified"
     true at runtime. Issue #45 changed the heredoc on purpose (the bootstrap
     starts the server with restore-on-restart off, and its review R1 passes
-    REAL_HERDR to the config check), so the base is that commit."""
+    REAL_HERDR to the config check), and so did the real-server leak fix
+    (only a directory that is itself *-shim is skipped), so the base is
+    that commit."""
     repo = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-    base = os.environ.get("MAM_BASE_SHA", "811b080")
+    base = os.environ.get("MAM_BASE_SHA", "525df2b")
     show = subprocess.run(["git", "show", "%s:.agents/skills/lib.sh" % base],
                           capture_output=True, text=True, cwd=repo)
     if show.returncode != 0: