Milestone 0: import zappier billing, Verae middleware, and Zapier research

Compose-ready workspace: packages/zappier (rate card, portal, Stripe),
packages/verae-zapier-middleware (timestamp + NATS), packages/verae-zapier
(CLI app), vendor/zapier-platform, and research/zapier vendor corpus.

Gate 0 structure checks pass. Product code and research are not yet wired.

vendor/zapier-platform/packages/legacy-scripting-runner/test/example-app/api-key-auth.js

@@ -0,0 +1,35 @@
+const { AUTH_JSON_SERVER_URL } = require('../constants');
+
+const testAuthSource = `
+  const responsePromise = z.request({
+    url: '${AUTH_JSON_SERVER_URL}/me'
+  });
+  return responsePromise.then(response => {
+    if (response.status !== 200) {
+      throw new Error('Auth failed');
+    }
+    return z.JSON.parse(response.content);
+  });
+`;
+
+module.exports = {
+  legacy: {
+    authentication: {
+      mapping: { 'X-Api-Key': '{{api_key}}' },
+      placement: 'header',
+    },
+  },
+
+  authentication: {
+    type: 'custom',
+    test: { source: testAuthSource },
+    fields: [
+      {
+        key: 'api_key',
+        label: 'API Key',
+        type: 'string',
+        required: true,
+      },
+    ],
+  },
+};