API capability pack for bounded Square operations against https://connect.squareup.com using Square API version 2026-05-20. Enroll a square API connection as OAuth bearer auth or access-token bearer auth; no credential is embedded in the manifest. The pack reads locations, customers, payments, refunds, orders, invoices, payouts, payout entries, and catalog objects for daily sales, billing, and bank reconciliation, and approval-gates customer profile create/update for everyday customer-list maintenance. It intentionally does not expose payment creation/capture/cancel/complete, refund creation, order pay, invoice creation/publish/cancel/delete, catalog writes, customer delete, webhooks, devices, payout initiation, bank accounts, loyalty writes, or arbitrary API passthrough.