NATS account + leaf allow-list. Leaf nodes cannot
publish verae.billing.*.
Forgejo: https://git.georgelambert.org/marchon/verae-nats-accounts
policy.json — machine-readable allow/deny (used by
access-leaf).nats.conf — sketch for a future accounts-enabled
nats-server (loopback).