API capability pack for bounded Paddle Billing REST operations against https://api.paddle.com. Enroll a paddle API connection as a bearer API-key connection with the narrowest Paddle permissions needed for the installed operations; no credential is embedded in this manifest. Reads catalog products/prices, customers, addresses, businesses, credit balances, discounts, subscriptions, transactions, adjustments, saved payment methods, reports, events, notifications, notification logs, and Paddle IP addresses. Writes are approval-gated and limited to product/price/customer/address/business/discount/discount-group maintenance and asynchronous report creation. Pricing, transaction, subscription-update, and subscription-charge preview endpoints are exposed as read-only preview calls because they do not mutate Paddle state. The pack intentionally excludes transaction creation/update/revision, adjustment/refund creation, subscription update/cancel/pause/resume/activate/charge, saved-payment-method deletion, customer auth tokens, customer portal sessions, client-side tokens, notification setting mutation, notification replay, simulations, webhook simulator replay, checkout-domain mutation, metrics, arbitrary API passthrough, and Paddle Classic APIs.