Title: fix(factory): atomically deploy and initialize pools to close admin-hijack front-running window

soroban/contracts/factory/Cargo.toml

@@ -12,4 +12,5 @@ doctest    = false
 soroban-sdk = { workspace = true }
 
 [dev-dependencies]
-soroban-sdk = { workspace = true, features = ["testutils"] }
+soroban-sdk  = { workspace = true, features = ["testutils"] }
+farming-pool = { path = "../farming-pool" }

soroban/contracts/factory/src/lib.rs

@@ -286,6 +286,11 @@ impl Factory {
         env.events().publish(
             (symbol_short!("factory"), symbol_short!("pool_upg")),
             (pool_id, record.address, new_wasm_hash),
+        );
+
+        Ok(())
+    }
+
     /// Update the WASM hash used for future `create_pool` deployments. Admin-only.
     ///
     /// Allows the admin to point future pool deployments at a corrected or upgraded

soroban/contracts/factory/src/test.rs

@@ -518,15 +518,15 @@ fn test_get_pools_by_asset_paginates_large_matching_registry() {
     let env = Env::default();
     env.mock_all_auths();
     let admin = Address::generate(&env);
-    let wasm_hash = upload_mock_pool_wasm(&env);
+    let wasm_hash = upload_farming_pool_wasm(&env);
     let factory_addr = env.register(Factory, ());
     let client = FactoryClient::new(&env, &factory_addr);
     client.initialize(&admin, &wasm_hash);
 
     // Create 25 pools all sharing the same asset
     let asset = Address::generate(&env);
     for i in 0..25 {
-        client.create_pool(&asset, &(100 + i as u128), &(10 + i as u64));
+        client.create_pool(&asset, &((100 + i as u128) * 17_280), &2u32, &(10 + i as u64));
     }
 
     // First page should return 20 records
@@ -716,7 +716,7 @@ fn test_refresh_pool_ttls_restores_ttl_for_unqueried_pool() {
     let t = setup();
     let id = t
         .client
-        .create_pool(&Address::generate(&t.env), &250u128, &50u64);
+        .create_pool(&Address::generate(&t.env), &(250u128 * 17_280), &2u32, &50u64);
 
     // Initial TTL after creation
     assert_eq!(pool_record_ttl(&t.env, &t.factory_addr, id), TTL_EXTEND_TO);