Update: I had a good 4-hour ride today in mostly rocky terrain and I saw NO leaks from the shaft. Everything is clean down there.
So it seems that it takes one o-ring. (?)
my guess is that the worn circlip was the reason for leaking since it allowed some axial play for the sprocket and possibly the sleeve.