Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn

Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.

packages/verae-fleet/test/fleet.test.js

@@ -58,6 +58,9 @@ describe('verae-fleet', () => {
       'access-api',
       'access-leaf',
       'access-zapier',
+      'access-staff',
+      'identity',
+      'jobs-events',
       'account-balance',
       'customer-service',
       'sales-pricing',
@@ -78,6 +81,8 @@ describe('verae-fleet', () => {
     assert.equal(tree.keepFloor, true);
     assert.equal(tree.configPath, 'services/tree-node.json');
     assert.equal(loaded.fleetPath, 'fleet.json');
+    const lan = loaded.machines.find((m) => m.id === 'lan-134');
+    if (lan) assert.equal(lan.enabled, false);
   });
 
   it('starts the tree-node floor (3 available copies)', async () => {

packages/verae-fleet/test/ssh.test.js

@@ -53,4 +53,19 @@ describe('SSH remote machine config', () => {
     const pick = pickMachine(machines, instances, 'tree-node', 'tree-node');
     assert.equal(pick.id, 'ns1');
   });
+
+  it('preferLocal keeps HTTP apps on the control host', () => {
+    const machines = [
+      normalizeMachine({ id: 'local', kind: 'local', host: '127.0.0.1', capacity: 32, roles: ['*'] }),
+      normalizeMachine({
+        id: 'ns1',
+        kind: 'ssh',
+        host: '70.88.205.138',
+        capacity: 24,
+        roles: ['*'],
+      }),
+    ];
+    const pick = pickMachine(machines, [], 'account-balance', 'account-balance', [], { preferLocal: true });
+    assert.equal(pick.id, 'local');
+  });
 });