ZP-B2-style support lookup. Staff session via IAM cookie — never stores customer xVerae- keys.

Look up by hash

Calls host /lookup/hash/:sha or admin /admin/api/support/hash/:sha when available. Evidence is receipt/CID only — jobId is not proof.

Apply credit

Credits write to account-balance. The customer sees dollars, not cents. Requires cs.credit (or owner).