Milestone 3: NATS wait (gate 9), hash lookup, zappier timestamp, NS1 tunnel

Wait-via-NATS returns completed or pending+jobId (GATE 9). Mock SHA256
idempotent register + GET /hashes/{sha256}. Zappier commercial edge has
POST /v1/timestamp and hash-lookup. GATE 12 smoke (signup + wait) passes.

NS1 NATS is 127.0.0.1:4222 on 70.88.205.138; SSH tunnel :14222. Local
nats-server -js used for isolated tests. Activate app adds Echo Text.

Learned: JetStream on NS1 is loopback-only; do not bind 4222 public.

packages/verae-zapier-middleware/test/unit/config.test.js

@@ -18,6 +18,7 @@ describe('config', () => {
       'tokenSecret',
       'jobPollIntervalMs',
       'jobPollMaxAttempts',
+      'waitTimeoutMs',
       'storePath',
     ]) {
       assert.notEqual(config[key], undefined, `missing config.${key}`);