penrose: prepaid x402 gate. POST /topup with an x402 payment to add request credits, then send signed requests (X-Wallet/X-Timestamp/X-Nonce/X-Signature) to any gated path.