API capability pack for bounded PayPal REST operations against https://api-m.paypal.com. Enroll a paypal API connection as an OAuth bearer-token connection backed by PayPal client-credentials access; no credential is embedded in the manifest. The pack reads checkout orders, payment authorizations, captures, refunds, transaction-search activity, balances, invoices, recurring-billing products, plans, subscriptions, subscription transactions, and disputes. It adds approval-gated invoice lifecycle operations for daily solo-business billing: create one draft invoice, send one invoice, send one invoice reminder, and cancel one sent invoice. It intentionally does not expose order creation, payment capture/authorize/void/refund creation, payouts, invoice pay/refund/delete/record-payment actions, product or plan mutation, subscription create/update/revise/suspend/cancel/activate/capture actions, dispute evidence/action endpoints, webhooks, vault tokens, or arbitrary API passthrough.