Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn

Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.

packages/verae-fleet/docs/CONSOLE.html

@@ -368,9 +368,10 @@
 <h1 class="title">Operator console</h1>
 </header>
 <h1 id="operator-console">Operator console</h1>
-<p>Loopback UI at <strong>http://127.0.0.1:3850/</strong> — Fleet, Trace
-(simulator), and Docs in one shell. Not a public site. NATS stays
-private; SSH identity files stay on disk.</p>
+<p>Operator UI at <strong>http://0.0.0.0:3850/</strong> (all
+interfaces). Fleet, Trace (simulator), and Docs in one shell. NATS stays
+private (<code>127.0.0.1:4222</code>); SSH identity files stay on
+disk.</p>
 <div class="sourceCode" id="cb1"><pre
 class="sourceCode bash"><code class="sourceCode bash"><span id="cb1-1"><a href="#cb1-1" aria-hidden="true" tabindex="-1"></a><span class="bu">cd</span> packages/verae-fleet</span>
 <span id="cb1-2"><a href="#cb1-2" aria-hidden="true" tabindex="-1"></a><span class="ex">node</span> src/cli.js serve</span></code></pre></div>

packages/verae-fleet/docs/CONSOLE.md

@@ -1,6 +1,6 @@
 # Operator console
 
-Loopback UI at **http://127.0.0.1:3850/** — Fleet, Trace (simulator), and Docs in one shell. Not a public site. NATS stays private; SSH identity files stay on disk.
+Operator UI at **http://0.0.0.0:3850/** (all interfaces). Fleet, Trace (simulator), and Docs in one shell. NATS stays private (`127.0.0.1:4222`); SSH identity files stay on disk.
 
 ```bash
 cd packages/verae-fleet