Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn

Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.

docs/sphinx/index.rst

@@ -33,6 +33,11 @@ Markdown indexes: https://zapier.georgelambert.org/index-md.html
    repos/verae-access-api
    repos/verae-access-leaf
    repos/verae-access-zapier
+   repos/verae-access-staff
+   repos/zappier-identity
+   repos/verae-jobs-events
+   repos/verae-nats-accounts
+   repos/zapier-decisions
 
 .. toctree::
    :maxdepth: 2
@@ -59,6 +64,7 @@ Markdown indexes: https://zapier.georgelambert.org/index-md.html
    modules/zappier/index
    modules/zappier/invoicing
    modules/zappier/jobs/report-usage
+   modules/zappier/ledger
    modules/zappier/meter
    modules/zappier/nats-shim.d
    modules/zappier/paths
@@ -157,6 +163,7 @@ Markdown indexes: https://zapier.georgelambert.org/index-md.html
    modules/verae-zapier-simulator/server
    modules/verae-zapier-simulator/trace
    modules/zappier-account-balance/books
+   modules/zappier-account-balance/persist
    modules/zappier-account-balance/server
    modules/zappier-account-balance/subjects
    modules/zappier-customer-service/nats-billing
@@ -172,5 +179,14 @@ Markdown indexes: https://zapier.georgelambert.org/index-md.html
    modules/verae-access-web/gate
    modules/verae-access-web/server
    modules/verae-access-api/server
+   modules/verae-access-leaf/allow
    modules/verae-access-leaf/server
    modules/verae-access-zapier/server
+   modules/verae-access-staff/server
+   modules/zappier-identity/ids
+   modules/zappier-identity/server
+   modules/zappier-identity/store
+   modules/zappier-identity/subjects
+   modules/verae-jobs-events/server
+   modules/verae-jobs-events/subjects
+   modules/verae-nats-accounts/policy