API capability pack for bounded Vercel REST API calls against https://api.vercel.com only. Reads identity, teams, projects, deployments, deployment events, aliases, project domains, and project environment-variable metadata for daily solo-developer and small-business release operations. Approval-gates deployment cancel/promote/rollback, project pause/unpause, project-domain add/verify/remove, and one project environment-variable create/update/remove. Enroll a Vercel bearer-token connection named vercel; no credential is embedded in the manifest. Environment reads pin decrypt=false and do not project secret values. The pack intentionally excludes deployment creation/file upload, deployment file-content reads, DNS record mutation, domain purchases/transfers/registrar changes, project deletion, team membership mutation, token management, billing, webhooks, log drains, arbitrary feature-flag management, arbitrary project settings, and arbitrary API passthrough.