max / makenotwork

pin the exact code on the sync account guard, restoring the hygiene seal fde8b6b9 landed `resp.status.is_client_error()`, which took `test_hygiene`'s loose-status count from 6 to 7 and left that seal red. The endpoint answers 401, so say 401. Worth noticing rather than just fixing: the seal was red in a commit that passed both hooks. The seals are tests; pre-commit runs gitleaks and rustfmt, and pre-push's build gate is skipped in this repo because MNW has no root Cargo.toml, so it gets the internal-deps gate alone. What would have caught it is the astra sweep's `test` check (nextest over the workspace), the next night, or Sando's cargo_test gate at deploy. So the exposure is a day, not forever.