force each container's unit configs in the checks about it

nix/module-eval/bao-basics.nix

@@ -24,6 +24,7 @@ let
     baoSettings
     baoStream
     bridgePorts
+    forceServiceConfigs
     ;
 
   baoPkcs11 = hive {
@@ -55,6 +56,12 @@ let
 
   tlsDir = "/var/lib/swarm-bao-tls";
   cases = [
+    {
+      # Every unit in the container merges without a priority collision, not
+      # only the keys the cases here read.
+      name = "the store's container units merge without a priority collision";
+      ok = forceServiceConfigs baoPkcs11.containers.swarm-bao.config;
+    }
     {
       # The store's seal is spread over six gates — the stanza, the
       # provisioning unit, two bind mounts, a device and an EnvironmentFile.