Bumps the astrolabe submodule to validate the one-click background-sync app password internally (IProvider::getToken) instead of via an HTTP loopback to overwrite.cli.url, which is unreachable from inside the app container and broke the multi-user-basic integration legs (enable_background_sync never succeeded). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>