spend

Charge amount of completed service by r at leaf group. requires group is a leaf; null if r's holdings there are insufficient. Charges leafSpent(inbound(group))[r] and rollupSpent(e)[r] for every strict-prefix edge e — one atomic patch keeping per-edge outstanding correct at every level (design fix 1). amount 0 is a no-op cancel.