apollo_deployments: test overrides list match

[nimrod-starkware]

No description provided.

[reviewable-StarkWare]

This change is 

[nimrod-starkware]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• apollo_deployments: regression test hybrid evaluation #14509 : 2 dependent PRs (#14529 , #14530 )
• apollo_deployments: CLI tests using testing overrides #14508
• apollo_deployments: introduce new CLI #14507
• apollo_deployments: flat to nested json util #14506
• apollo_deployments: test overrides list match #14480 👈 (View in Graphite)
• apollo_deployments: check applicative config matches deployed app_configs #14489 : 2 other dependent PRs (#14505 , #14606 )
• apollo_deployments: assemble and deserialize node config from jsonnet #14487
• apollo_deployments: assemble full node config via build.libsonnet #14486
• apollo_deployments: distributed layout jsonnet test #14485
• apollo_deployments: consolidated layout jsonnet test #14484
• apollo_deployments: test hybrid layout for infra config #14483
• apollo_deployments: introduce hybrid layout for infra config #14482
• apollo_deployments: introduce jsonnet building blocks for infra config #14481
• apollo_deployments: jsonnet applicative config #14479
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[cursor]

PR Summary

Low Risk
Test-only changes in apollo_deployments; no runtime deployment or config generation behavior is modified.

Overview
Adds a deployment test that keeps Rust’s KEYS_TO_BE_REPLACED set aligned with what applicative_config.libsonnet actually reads from overrides.

The harness derives expected override paths from KEYS_TO_BE_REPLACED (collapsing optional .#is_none roots), injects path-tagged sentinel strings at each path, evaluates function(overrides), and asserts every declared path’s sentinel shows up in the output. Evaluation/serialization failures catch reads of undeclared paths or illegal sub-field access on optional configs.

Wired through keys_to_be_replaced_are_covered_by_override_schema in deployment_definitions_test.rs, alongside the existing applicative vs app_configs check.

^{Reviewed by Cursor Bugbot for commit aea4a35. Bugbot is set up for automated code reviews on this repo. Configure here.}