CreateModuleAccount now also grants serve.<module>.* (declare, bind, consume its own tool queues) and mesh.rpc (bind them on, publish replies) — so a module can serve its tools and reply, scoped to exactly its own, and no other module's. The broker tests still hold a module out of another's queue.