Milestone 3: NATS wait (gate 9), hash lookup, zappier timestamp, NS1 tunnel

Wait-via-NATS returns completed or pending+jobId (GATE 9). Mock SHA256
idempotent register + GET /hashes/{sha256}. Zappier commercial edge has
POST /v1/timestamp and hash-lookup. GATE 12 smoke (signup + wait) passes.

NS1 NATS is 127.0.0.1:4222 on 70.88.205.138; SSH tunnel :14222. Local
nats-server -js used for isolated tests. Activate app adds Echo Text.

Learned: JetStream on NS1 is loopback-only; do not bind 4222 public.

packages/verae-zapier/test/app.test.js

@@ -27,6 +27,7 @@ describe('verae-zapier app definition', () => {
     assert.ok(App.creates.verify_timestamp);
     assert.ok(App.creates.batch_timestamp);
     assert.ok(App.searches.job_status);
+    assert.ok(App.searches.hash_lookup);
     assert.ok(App.triggers.timestamp_completed);
   });