chore: record the new pinned doubles and drop the tracker id from a runtime string

`check:engine-double-contract --write` records the three newly-pinned seams in
the #16608 conformance file's engine double — new pinned coverage the ledger
had not learned about yet.

The fail-closed developer message no longer carries the tracker id: a runtime
string reaches authors and operators, none of whom can resolve `#NNNN`
(check:doc-authoring). The id stays in the adjacent comment, where the reader
who can resolve it is already looking.

Refs #16608.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012zTkyNHJ7TkuN2oXtP5x37

Author: claude

packages/plugins/plugin-security/src/security-plugin.ts

@@ -3308,7 +3308,7 @@ export class SecurityPlugin implements Plugin {
       if (insertCheckSeam && insertCheckSeam.honoured !== true) {
         const developerMessage =
           `[Security] Access denied: the insert on '${opCtx.object}' was executed without the row-level CHECK ` +
-          `being evaluated — the engine did not run OperationContext.postHookWriteImageCheck (#16608). ` +
+          `being evaluated — the engine did not run OperationContext.postHookWriteImageCheck. ` +
           `The write is NOT vouched for by this gate.`;
         // Contract arg order (#5637): `error(message, error?: Error, meta?)` —
         // the structured fields ride in the THIRD position. There is no `Error`

scripts/engine-double-contract.pinned.json

@@ -2681,6 +2681,21 @@
       "verb": "findOne",
       "pinned": 2
     },
+    {
+      "file": "packages/plugins/plugin-security/src/insert-check-post-image.test.ts",
+      "verb": "delete",
+      "pinned": 1
+    },
+    {
+      "file": "packages/plugins/plugin-security/src/insert-check-post-image.test.ts",
+      "verb": "findOne",
+      "pinned": 1
+    },
+    {
+      "file": "packages/plugins/plugin-security/src/insert-check-post-image.test.ts",
+      "verb": "update",
+      "pinned": 1
+    },
     {
       "file": "packages/plugins/plugin-security/src/invitation-placement.test.ts",
       "verb": "findOne",