packetdial: build out + document the skill against the live NetSapiens v2 API

Key is now provisioned + live-verified, so grounded the skill in the real spec (RTFM):
- Mapped the OpenAPI surface (v44.4.10, 239 paths / 354 ops) — capability map added to
  SKILL.md (what the platform exposes vs what's wrapped vs raw-only).
- Added 6 live-verified read wrappers (ns.py + ns_client.py): callqueues, timeframes,
  sites, contacts, autoattendants, billing (domain limits/usage).
- Replaced the stale "not yet provisioned" credentials section with the live status
  (vaulted nsr_ reseller key, key-id nsr_hSGUB5Wo, scope Reseller 91912.service, RW) +
  the pbx.packetdial.com vs api.ucaasnetwork.com hostname note + override.
- api.md history updated. Writes remain gated behind --confirm; everything unwrapped
  reachable via `raw`.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.claude/skills/packetdial/references/api.md

@@ -80,3 +80,9 @@ exact request/response schema of any specific path.
   `msp-tools/oitvoip.sops.yaml` was the open TODO.
 - 2026-06-02: `packetdial` skill created wrapping the v2 API (read-by-default,
   gated writes). Confirmed `voip.` is portal-only and `pbx.` is the API host.
+- 2026-06-22: **Reseller API key provisioned + vaulted** (`msp-tools/oitvoip.sops.yaml`,
+  key-id `nsr_hSGUB5Wo`, scope Reseller `91912.service`, read-write). Live-verified end to
+  end. RTFM pass over the v2 spec (v44.4.10, 239 paths / 354 ops) — capability map added to
+  SKILL.md. Added live-verified read wrappers: `callqueues`, `timeframes`, `sites`,
+  `contacts`, `autoattendants`, `billing`. Reseller territory = 3 domains today
+  (arizonacomputerguru + two `*.91912.service`).