CI: scan hosted tests assert codes, not sentences (#1089)

crates/socket-patch-cli/tests/cli/telemetry_e2e.rs

@@ -1055,7 +1055,7 @@ const HOSTED_UUID: &str = "11111111-1111-4111-8111-111111111111";
 const HOSTED_URL: &str = "https://patch.socket.dev/patch/npm/telemetry-hosted/1.0.0/22222222-2222-4222-8222-222222222222/11111111-1111-4111-8111-111111111111/telemetry-hosted-1.0.0.tgz";
 
 /// An npm project whose lockfile resolves [`HOSTED_NAME`] upstream (the
-/// `covgap_commands_scan_hosted.rs` `write_npm_project` shape).
+/// `scan/hosted_fixture.rs` `write_npm_project` shape).
 fn write_hosted_npm_project(root: &Path) {
     std::fs::write(
         root.join("package.json"),

crates/socket-patch-cli/tests/get/get_failure_paths.rs

@@ -1204,7 +1204,7 @@ async fn vendored_lock_held_vendor_step_errors_without_vendor_envelope() {
 }
 
 /// Hosted twin of `vendored_lock_held_vendor_step_errors_without_vendor_envelope`
-/// (and of `covgap_commands_scan_hosted::hosted_lock_held_refuses_before_any_write`):
+/// (and of `scan/hosted_failure_paths.rs`'s `hosted_lock_held_refuses_before_any_write`):
 /// `get <uuid> --mode hosted` folds its result into the HOSTED error
 /// envelope, so a held apply lock surfaces as the top-level
 /// `error: {code: "lock_held", message}` object (v5.0: no top-level

crates/socket-patch-cli/tests/get/get_fixture.rs

@@ -615,7 +615,7 @@ pub async fn mount_ghsa_single(server: &MockServer) {
 }
 
 /// The hosted reference endpoint granting `uuid` for `purl` at `url` (the
-/// `covgap_commands_scan_hosted` fixture shape).
+/// `scan/hosted_fixture.rs` fixture shape).
 pub async fn mount_granted_reference(server: &MockServer, uuid: &str, purl: &str, url: &str) {
     Mock::given(method("POST"))
         .and(path(format!("/v0/orgs/{ORG}/patches/package")))