fix(ci): count both OCI recovery reads

test/back/ql3PluginPackageRecoveryE2ELiveAudit.test.cjs

@@ -82,11 +82,11 @@ function validReport() {
     oci: {
       https: true,
       authentication: 'exact-registry-basic',
-      authenticatedRequestCount: 12,
-      requestCount: 12,
+      authenticatedRequestCount: 24,
+      requestCount: 24,
       uniquePaths: 12,
-      initialRequestCount: 6,
-      upgradeRequestCount: 6,
+      initialRequestCount: 12,
+      upgradeRequestCount: 12,
       redirects: 0,
     },
     kubernetes: {

test/back/ql3PluginPackageRecoveryE2ELiveContract.test.cjs

@@ -243,6 +243,8 @@ test('private Registry evidence uses one exact Secret file and authenticated req
   assert.match(live, /secretName: 'ql3-e2e-registry-auth'/);
   assert.match(live, /defaultMode: 288/);
   assert.match(live, /authentication: 'exact-registry-basic'/);
+  assert.match(live, /fixture\.initial\.routes\.length \* 2/);
+  assert.match(live, /fixture\.upgrade\.routes\.length \* 2/);
   assert.match(
     live,
     /packageRequests\.every\(\(event\) => event\.authenticated === true\)/,