R-1110: the guard's census is 42 calls, not 41 (measured; comment and CHANGELOG)

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -26,7 +26,7 @@ burndown 3 (felhom.eu `REPORT-burndown-3-2026-10-17.md`).
   byte-identical compose (no recreate per pass). Every box with sharing on recreates samba ONCE after this update (the
   label is new). `TestRenderSambaCompose_ConfigHashLabel`, `TestSambaReconcile_SamePathRenameChangesCompose`, red-proved.
 - **R-1110** — `TestNoBareDrivePathToPathHelpers`: the R-1017 guard for `RecoveryUnitPath`, `AppDataDir` and
-  `PrimaryBackupPath`, through both packages (41 calls). All passed a namespace root; two only by a comment —
+  `PrimaryBackupPath`, through both packages (42 calls). All passed a namespace root; two only by a comment —
   `GetStackBackupData`'s parameter renamed `nsRoot` (its caller passes `AppNamespaceRoot`), and the storage page's app
   size (`appDetailsForPath`) now goes through `appbackup.NamespaceRootFor` (same path on an enrolled drive). Loop
   variables in `removed_units.go`, `offbox_placement.go`, `offbox.go` renamed. Red-proved three ways.