verae-access-web

Direct web access plane. Customer browsers hit this process, not Zapier and not the NATS port.

Forgejo: https://git.georgelambert.org/marchon/verae-access-web

Every NATS hop is verae.access.web.* → verae.access.authz.check → internal verae.billing.statement.get (reload only, not CS credits).

Route	Job
`GET /health`	`{ plane: "web" }`
`GET /statement/:id`	Authz then statement
`POST /reload`	Authz then `balance.adjust` kind=reload

Port :3021.