Bind each customer to a Verae userId for hop tracing

Signup registers/binds a Verae central user and stores veraeUserId. Public access stays the zappier API key. Chain JWTs stay server-side behind tokenRef. Authz, billing, and jobs.watch carry veraeUserId.

docs/sphinx/modules/verae-zapier-middleware/store/db.md

@@ -2,7 +2,7 @@
 
 **Package:** `verae-zapier-middleware`  
 **Source:** `packages/verae-zapier-middleware/src/store/db.js`  
-**Lines:** 118
+**Lines:** 120
 
 ## What this module is
 

docs/sphinx/modules/verae-zapier-middleware/store/tenants.md

@@ -2,7 +2,7 @@
 
 **Package:** `verae-zapier-middleware`  
 **Source:** `packages/verae-zapier-middleware/src/store/tenants.js`  
-**Lines:** 138
+**Lines:** 142
 
 ## What this module is
 
@@ -30,8 +30,9 @@ _None extracted._
   plan = 'free',
   veraeUsername,
   veraePassword,
+  veraeUserId,
   contract = null,
-  apiKey = generateApiKey(` | params: `object`, params.id: `string`, params.name: `string`, params.plan: `string`, params.veraeUsername: `string`, params.veraePassword: `string`, params.contract: `object|null`, params.apiKey: `string`, params.metadata: `object` | `{ tenant: Tenant, apiKey: string ` — } | see Call graph |
+  apiKey = generateApiKey(` | params: `object`, params.id: `string`, params.name: `string`, params.plan: `string`, params.veraeUsername: `string`, params.veraePassword: `string`, params.veraeUserId: `string`, params.contract: `object|null`, params.apiKey: `string`, params.metadata: `object` | `{ tenant: Tenant, apiKey: string ` — } | see Call graph |
 | `resolveLimits` | `tenant` | tenant: `Tenant` | `{
  *   timestamps: number|null,
  *   verifications: number|null,

docs/sphinx/modules/verae-zapier-middleware/store/tokenRefs.md

@@ -0,0 +1,48 @@
+# `verae-zapier-middleware/store/tokenRefs`
+
+**Package:** `verae-zapier-middleware`  
+**Source:** `packages/verae-zapier-middleware/src/store/tokenRefs.js`  
+**Lines:** 21
+
+## What this module is
+
+Implementation module in `verae-zapier-middleware`. The tables below are extracted from the source (signatures + JSDoc).
+
+## Exports
+
+`issueTokenRef`, `resolveTokenRef`
+
+## Types / interfaces / classes
+
+_None extracted._
+
+## Functions
+
+| Name | Parameters | Param types (JSDoc) | Returns | Calls (same file / helpers) |
+|------|------------|---------------------|---------|-----------------------------|
+| `issueTokenRef` | `tenantId` | — | `unknown` | see Call graph |
+| `resolveTokenRef` | `ref` | — | `unknown` | see Call graph |
+
+## Methods (class / object)
+
+| Name | Parameters |
+|------|------------|
+| `persist` | `(none)` |
+
+## What it imports / requires
+
+- `node:crypto`
+- `./db.js`
+
+## Call graph (identifiers invoked)
+
+`issueTokenRef`, `randomBytes`, `toString`, `getStore`, `toISOString`, `persist`, `resolveTokenRef`
+
+Each identifier is a call site in this file. Follow the import list to see the defining module; open that module’s MD for parameter and return types.
+
+## Return values (how to read this)
+
+- HTTP route handlers return Express `res.json(...)` bodies (see route docs).
+- Zapier `perform` functions return a **single object** (creates) or an **array** (triggers/searches).
+- Pricing functions return integer **cents** on `Quote.totalCents`.
+

docs/sphinx/modules/verae-zapier-middleware/store/tokenRefs.rst

@@ -0,0 +1,7 @@
+verae-zapier-middleware.store.tokenRefs
+=======================================
+
+Generated API sheet for ``verae-zapier-middleware/store/tokenRefs``.
+
+.. include:: tokenRefs.md
+   :parser: myst_parser.sphinx_