scripts: the engine-double ledger records the catalog-loader pin's findOne double

Claude-Session: https://claude.ai/code/session_01VHtcG1CjvZzd7U6F9Yg8oN
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

scripts/engine-double-contract.pinned.json

@@ -3406,6 +3406,11 @@
       "verb": "update",
       "pinned": 2
     },
+    {
+      "file": "packages/plugins/plugin-security/src/security-readers-catalog.test.ts",
+      "verb": "findOne",
+      "pinned": 1
+    },
     {
       "file": "packages/plugins/plugin-security/src/seed-write-refusal.test.ts",
       "verb": "update",