Bind each customer to a Verae userId for hop tracing

Signup registers/binds a Verae central user and stores veraeUserId. Public access stays the zappier API key. Chain JWTs stay server-side behind tokenRef. Authz, billing, and jobs.watch carry veraeUserId.

packages/verae-access-authz/src/policy.js

@@ -89,6 +89,8 @@ export function authorize(req) {
     plane,
     subject: internal,
     principal: req?.principal || null,
+    veraeUserId: req?.veraeUserId || req?.payload?.veraeUserId || null,
+    traceId: req?.traceId || req?.payload?.traceId || null,
     reason: 'ok',
   };
 }