openvibe-contracts v0.8.0 (billing capabilities released); CI runs openvibe-contracts-check --service billing

ddiff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
iindex d17156f..f26179e 100644
---- a/.github/workflows/ci.yml
++++ b/.github/workflows/ci.yml
@@@ -14,6 +14,4 @@ jobs:
            cache: npm
        - run: npm ci --no-audit --no-fund
        - run: npm test
--      # openvibe-contracts-check --service billing is added once the billing manifest and the
--      # billing.* capabilities (docs/capabilities-proposal/) ship in an openvibe-contracts release;
--      # v0.5.1 still carries the placeholder manifest (range ^0.1.0, no capabilities).
++      - run: npx openvibe-contracts-check --service billing
ddiff --git a/package-lock.json b/package-lock.json
iindex a5ede9d..6f34e7a 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -12,7 +12,7 @@
          "better-sqlite3": "^11.10.0",
          "dotenv": "^16.4.7",
          "express": "^4.21.2",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1"
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.8.0"
        },
        "engines": {
          "node": ">=22.0.0"
@@@ -860,9 +860,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.5.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1",
--      "integrity": "sha512-czQpWKEo8cY56Crj5l5Mv8r5vlIIj0vn/HMxv0OlIu5YTuSSlpvXyayYEfn3GQ5orDhaMIhOUlzmQMxUtWXaLA==",
++      "version": "0.8.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.8.0",
++      "integrity": "sha512-2Msdb+k+fJZf9kQTPS2jdY8+o9FhL9tBuu3FzArHs3JcBcc06ReHpOi2sgnSBgQcSvZSaSsWT2YVbmhjnEplqQ==",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
ddiff --git a/package.json b/package.json
iindex 2f83a7f..64d079e 100644
---- a/package.json
++++ b/package.json
@@@ -18,7 +18,7 @@
      "better-sqlite3": "^11.10.0",
      "dotenv": "^16.4.7",
      "express": "^4.21.2",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1"
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.8.0"
    },
    "engines": {
      "node": ">=22.0.0"
ddiff --git a/server/api/auth.js b/server/api/auth.js
iindex 9a54a8a..024fcb0 100644
---- a/server/api/auth.js
++++ b/server/api/auth.js
@@@ -5,10 +5,9 @@
   * from OpenVibe.Network for audience 'openvibe.billing'; the capability is checked here against
   * the token's `cap` claim.
   *
-- * The billing.* capabilities are proposed (docs/capabilities-proposal/) and not yet in an
-- * openvibe-contracts release, so contracts' capabilities.check() would answer capability.unknown.
-- * Until they ship, the grant is matched locally with contracts' own grants(): an exact id, or a
-- * trailing ".*" family grant ("billing.*", "billing.cashout.*").
++ * The billing.* capabilities ship in openvibe-contracts v0.8.0. The grant is matched with
++ * contracts' own grants(): an exact id, or a trailing ".*" family grant ("billing.*",
++ * "billing.cashout.*").
   */
  const { serviceAuth, capabilities, http, validate } = require('openvibe-contracts');