Finish Core Hub private shadow onboarding

tests/test_credential_change.py

@@ -86,7 +86,8 @@ class CredentialChangeTests(unittest.TestCase):
         self.assertEqual(ccr["target"]["rapp"], "rapp-core-hub")
         self.assertEqual(ccr["openbao"]["fields"], ["CORE_HUB_API_TOKEN"])
         self.assertNotIn("CORE_HUB_DATABASE_URL", ccr["openbao"]["fields"])
-        self.assertTrue(any("bound claim is not confirmed" in item for item in warnings))
+        self.assertEqual(warnings, [])
+        self.assertTrue(ccr["openbao"]["auth"]["bound_claims_confirmed"])
 
         boundary = (
             REPO_DIR / "openbao/policies/agent-high-risk-boundary.hcl"