test(client): ledger the nested-relation pin's producer reads in the census

The rest pin packages/rest/src/analytics-nested-relation-filter.test.ts
calls the real AnalyticsService (the cube read) five times, to compare its
answer for a nested-relation filter with the engine's. Those are producer
reads, not SDK callers: one NOT_SDK ledger row, with the service-receiver
count and the NOT_SDK total moved from 1 to 6, and the two-file set asserted.

Claude-Session: https://claude.ai/code/session_01XY5uCwTjZj7884yYtyur4H
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/client/src/envelope-caller-census.test.ts

@@ -473,6 +473,12 @@ const LEDGER: readonly LedgerRow[] = [
         method: 'analytics.query', receiver: 'service', count: 1, verdict: 'NOT_SDK',
         why: 'the real AnalyticsService, called to assert the SDK value equals what the producer returned',
     },
+    // ── the nested-relation pin in `@objectstack/rest`: producer reads only ──
+    {
+        file: 'packages/rest/src/analytics-nested-relation-filter.test.ts',
+        method: 'analytics.query', receiver: 'service', count: 5, verdict: 'NOT_SDK',
+        why: 'the real AnalyticsService (the cube read), called to compare its answer for the nested-relation filter with the engine\'s',
+    },
     {
         file: 'packages/client/src/analytics-automation-json-erasure.test.ts',
         method: 'analytics.meta', receiver: 'sdk', count: 2, verdict: 'PAYLOAD_DEPENDENT',
@@ -670,8 +676,11 @@ describe('#13079 §2 — positive controls on the matcher itself', () => {
         // method, so a literal-embedded site lands HERE first, as a phantom
         // producer call. That makes this the assertion most likely to break
         // for a reason that has nothing to do with receivers.
-        expect(service.length, literalNote()).toBe(1);
-        expect(service[0]?.file).toBe('packages/client/src/analytics-automation-json-erasure.test.ts');
+        expect(service.length, literalNote()).toBe(6);
+        expect([...new Set(service.map((s) => s.file))].sort()).toEqual([
+            'packages/client/src/analytics-automation-json-erasure.test.ts',
+            'packages/rest/src/analytics-nested-relation-filter.test.ts',
+        ]);
     });
 });
 
@@ -716,10 +725,10 @@ describe('#13079 §3 — every call site is classified', () => {
         expect(production, literalNote()).toEqual([]);
     });
 
-    it('records the split: 18 payload pins, 10 result-insensitive, 1 not-SDK', () => {
+    it('records the split: 18 payload pins, 10 result-insensitive, 6 not-SDK', () => {
         expect(verdictTotal('PAYLOAD_DEPENDENT')).toBe(18);
         expect(verdictTotal('RESULT_INSENSITIVE')).toBe(10);
-        expect(verdictTotal('NOT_SDK')).toBe(1);
+        expect(verdictTotal('NOT_SDK')).toBe(6);
         // The three above are LEDGER sums and cannot move on a census reading;
         // this one is census-derived, so it carries the note. [#13874]
         expect(sdkSites.length, literalNote()).toBe(28);