Cite hq ADR 0170, not 0169: the firewall seat's record was renumbered after a collision on hq main

internal/apply/apply.go

@@ -1583,7 +1583,7 @@ func containerSpecReading(r *declaration.Container, declares, reads map[string]s
 	for _, n := range r.Networks {
 		b.WriteString("also-on " + n + "\n")
 	}
-	// And the capabilities it was granted (ADR 0169): one gained or dropped is a different
+	// And the capabilities it was granted (ADR 0170): one gained or dropped is a different
 	// container, and the runtime cannot change a running one's.
 	for _, c := range r.Capabilities {
 		b.WriteString("cap " + c + "\n")

internal/apply/left_out_test.go

@@ -135,7 +135,7 @@ func TestALeftOutModuleIsNeitherRemovedNorForgotten(t *testing.T) {
 	}
 }
 
-// A container's capabilities reach the runtime and are part of its spec (novox/hq ADR 0169).
+// A container's capabilities reach the runtime and are part of its spec (novox/hq ADR 0170).
 func TestACapabilityReachesTheRuntimeAndTheSpec(t *testing.T) {
 	var ran []string
 	run := func(_ context.Context, name string, args ...string) (string, error) {