derive a missing client digest from the secret that exists

A client with a secret in the store or in a leftover file but no digest gets the digest of that secret instead of stopping the unit. The password reaches authelia's prompt through a pty, not argv. A lost mint race takes the winner's secret. Also name the mint, not the publisher, in the remaining rust docs.

nix/module-eval/secret-publisher.nix

@@ -488,7 +488,8 @@ let
         && !(lib.hasInfix "swarmctl" migrate.script)
         && !(lib.hasInfix "mint_client_secret swarmctl" mint.script)
         && migrate.serviceConfig.RestartPreventExitStatus == 3
-        && mint.serviceConfig.RestartPreventExitStatus == 3
+        # The mint answers authelia's password prompt through a pty.
+        && lib.any (p: lib.hasPrefix "util-linux" (p.name or "")) mint.path
         && migrate.serviceConfig.Restart == "on-failure"
         && migrate.serviceConfig.Type == "oneshot";
     }