Milestone 3: NATS wait (gate 9), hash lookup, zappier timestamp, NS1 tunnel

Wait-via-NATS returns completed or pending+jobId (GATE 9). Mock SHA256
idempotent register + GET /hashes/{sha256}. Zappier commercial edge has
POST /v1/timestamp and hash-lookup. GATE 12 smoke (signup + wait) passes.

NS1 NATS is 127.0.0.1:4222 on 70.88.205.138; SSH tunnel :14222. Local
nats-server -js used for isolated tests. Activate app adds Echo Text.

Learned: JetStream on NS1 is loopback-only; do not bind 4222 public.

docs/modules/verae-zapier/index.md

@@ -2,7 +2,7 @@
 
 **Package:** `verae-zapier`  
 **Source:** `packages/verae-zapier/index.js`  
-**Lines:** 79
+**Lines:** 81
 
 ## What this module is
 
@@ -32,6 +32,7 @@ _None extracted._
 - `./creates/batch_timestamp`
 - `./creates/add_numbers`
 - `./searches/job_status`
+- `./searches/hash_lookup`
 - `./triggers/timestamp_completed`
 - `zapier-platform-core`
 - `./package.json`