fix(cli): read allowance fields from AuthorizationExtent (#125)

### Problem
`dotns bulletin authorize` reports `Authorization was finalized but not
applied` even when the on-chain call succeeds. The misleading error `may
not have Authorizer privileges` fires every time, blocking CI deploys.
Example in [mark3t
CI](https://github.com/paritytech/mark3t/actions/runs/25509126698/job/74863965404?pr=209).

### Root cause
After paritytech/polkadot-bulletin-chain
[#448](paritytech/polkadot-bulletin-chain#448),
AuthorizationExtent fields `transactions` and `bytes` now mean consumed
counters, not allowances. New fields `transactions_allowance` and
`bytes_allowance` carry the granted total instead.

```rust
  // pallets/transaction-storage/src/lib.rs after #448
  pub struct AuthorizationExtent {
      pub transactions: u32,            // CONSUMED so far
      pub transactions_allowance: u32,  // total ALLOWANCE (new field)
      pub bytes: u64,                   // CONSUMED so far
      pub bytes_permanent: u64,
      pub bytes_allowance: u64,         // total ALLOWANCE (new field)
  }
```
The CLI compares the consumed counter (0 for a fresh authorization)
against the requested allowance (1_000_000 default), so 0 >= 1_000_000
is false → "not applied".

The error fires only when on-chain dispatch already succeeded (event.ok
=== true in the finalized case handler). The "Authorizer privileges"
wording is a misleading hardcoded message - the actual cause is the
wrong field read.

### Fix
Read `transactions_allowance` and `bytes_allowance` from
`AuthorizationExtent`, update `AuthorizationStatus` type to expose them,
fix the comparison in the post-flight verification and pre-flight quota
check. JSON output field names kept stable for backwards-compat.

###  Test plan
- bunx tsc --noEmit clean
- bun run lint clean
- bun run test:unit — 163/163 passing
- Metadata refresh applied; .papi/metadata/bulletin.scale includes
`transactions_allowance`, `bytes_allowance`, `bytes_permanent`

Author: Imod7

packages/cli/.papi/descriptors/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-autogenerated.1427683338681917606",
+  "version": "0.1.0-autogenerated.15093024273838411924",
   "name": "@polkadot-api/descriptors",
   "files": [
     "dist"

packages/cli/.papi/metadata/bulletin.scale

@@ -12,7 +12,7 @@
       "wsUrl": "wss://paseo-bulletin-rpc.polkadot.io",
       "metadata": ".papi/metadata/bulletin.scale",
       "genesis": "0x744960c32e3a3df5440e1ecd4d34096f1ce2230d7016a5ada8a765d5a622b4ea",
-      "codeHash": "0x9838682961f13a0665e7dac54178aa99531391530e60e879a9eab84d6dc2a199"
+      "codeHash": "0xd248224df107ca81267a5a4d0671bb9618dbb1a43fae7fad6ba2331a45a10ac5"
     }
   }
 }

packages/cli/.papi/polkadot-api.json

@@ -933,8 +933,8 @@ export function attachBulletinCommands(root: Command): void {
             rpc: bulletinRpc,
             authorized: authStatus.authorized,
             expired: authStatus.expired ?? false,
-            transactions: authStatus.transactions ?? 0,
-            bytes: (authStatus.bytes ?? BigInt(0)).toString(),
+            transactions: authStatus.transactions_allowance ?? 0,
+            bytes: (authStatus.bytes_allowance ?? BigInt(0)).toString(),
             expiresAt: expirationToISOString(authStatus.currentBlock, authStatus.expiration),
           });
         } else {
@@ -964,11 +964,11 @@ export function attachBulletinCommands(root: Command): void {
             );
             console.log(
               chalk.gray("  transactions: ") +
-                chalk.white((authStatus.transactions ?? 0).toLocaleString()),
+                chalk.white((authStatus.transactions_allowance ?? 0).toLocaleString()),
             );
             console.log(
               chalk.gray("  bytes:        ") +
-                chalk.white(formatBytes(authStatus.bytes ?? BigInt(0))),
+                chalk.white(formatBytes(authStatus.bytes_allowance ?? BigInt(0))),
             );
 
             if (isExpired) {

packages/cli/src/cli/commands/bulletin.ts

@@ -432,8 +432,8 @@ export async function authorizeAccount(
     const existingAuthorization = await checkAuthorization(rpc, targetAddress);
 
     if (existingAuthorization.authorized) {
-      const existingTransactions = existingAuthorization.transactions ?? 0;
-      const existingBytes = existingAuthorization.bytes ?? BigInt(0);
+      const existingTransactions = existingAuthorization.transactions_allowance ?? 0;
+      const existingBytes = existingAuthorization.bytes_allowance ?? BigInt(0);
 
       if (existingAuthorization.expired) {
         emitPhase(onPhase, "authorize", "warning", "Authorization expired");
@@ -496,8 +496,8 @@ export async function authorizeAccount(
                   if (
                     verification.authorized &&
                     !verification.expired &&
-                    (verification.transactions ?? 0) >= transactions &&
-                    (verification.bytes ?? BigInt(0)) >= bytes
+                    (verification.transactions_allowance ?? 0) >= transactions &&
+                    (verification.bytes_allowance ?? BigInt(0)) >= bytes
                   ) {
                     emitPhase(onPhase, "authorize", "success", "Account authorized");
                     resolve({ txHash, blockHash: event.block.hash });
@@ -572,8 +572,8 @@ export async function checkAuthorization(
 
       return {
         authorized: true,
-        transactions: authorizationState.extent.transactions,
-        bytes: authorizationState.extent.bytes,
+        transactions_allowance: authorizationState.extent.transactions_allowance,
+        bytes_allowance: authorizationState.extent.bytes_allowance,
         expiration,
         currentBlock,
         expired,

packages/cli/src/commands/bulletin.ts

@@ -379,10 +379,10 @@ export type AuthorizeAccountOptions = {
 export type AuthorizationStatus = {
   /** Whether an authorization entry exists in chain storage */
   authorized: boolean;
-  /** Remaining transaction allowance */
-  transactions?: number;
-  /** Remaining byte allowance */
-  bytes?: bigint;
+  /** Total transaction allowance granted by `authorize_account` */
+  transactions_allowance?: number;
+  /** Total byte allowance granted by `authorize_account` */
+  bytes_allowance?: bigint;
   /** Block number at which the authorization expires */
   expiration?: number;
   /** Current chain block number at time of query */