force each container's unit configs in the checks about it

nix/module-eval/bao-controller.nix

@@ -20,6 +20,7 @@ let
     })
     hive
     runGroup
+    forceServiceConfigs
     ;
 
   # Store and controller on one machine, with a CN no default could supply.
@@ -109,6 +110,12 @@ let
       a: !a.assertion && lib.hasInfix "swarm-controller.baoClientCertFile and" a.message
     ) m.assertions;
   cases = [
+    {
+      # Every unit in the container merges without a priority collision, not
+      # only the keys the cases here read.
+      name = "the store's container units merge without a priority collision beside the controller";
+      ok = forceServiceConfigs baoControllerHere.containers.swarm-bao.config;
+    }
     {
       # The queue client secret lives only in the store, so a controller that
       # cannot log in there cannot reach the queue. Refused at eval rather than