The lab is marked moved: its forge files are templates filled from the forge-account binding, which the controller cannot answer (issue 1966)

modules/lab/module.json

@@ -1,6 +1,7 @@
 {
   "module": "lab",
   "version": "1",
+  "moved": true,
   "capabilities": [
     "container-runtime",
     "virtualisation"

modules/lab/test/runs.test.ts

@@ -125,10 +125,11 @@ function renderedForgeFiles(forge: string): string {
 
 test("the lab requires the forge account for its clones, and holds no registry credential", () => {
   const m = JSON.parse(readFileSync(join(labDir, "module.json"), "utf8")) as {
-    requires: string[]; contributes?: unknown; secrets?: unknown; resources: { id: string; path?: string; template?: string; package?: string }[];
+    moved?: boolean; requires: string[]; contributes?: unknown; secrets?: unknown; resources: { id: string; path?: string; template?: string; package?: string }[];
     build: { artifacts: { name: string; env?: Record<string, string> }[] };
   };
   assert.ok(m.requires.includes("forge-account") && m.requires.includes("npm-package-registry"));
+  assert.equal(m.moved, true, "its files are templates filled from the forge-account binding by the node-engine, which a module that has moved asks for");
   assert.equal(m.contributes, undefined, "npm-package-registry reads are anonymous: nothing is contributed");
   assert.equal(m.secrets, undefined, "no registry secret is sealed to the lab");
   const env = m.build.artifacts.find((a) => a.name === "code")?.env ?? {};