Assert the shared bound-observer registration helper writes a cert-class device binding with the expected fingerprint. This prevents helper regressions from silently minting unbound records while downstream tests continue authenticating on bearer keys.