do not show PAUSE work logs while testing

...unless you ran with TEST_VERBOSE (like prove -v)
treat index line minimum as include, not exclusive
allow us to test starting with an empty PAUSE
make test pauses easy to spin up
test that we refuse new modules if there is any kind of permission
treat any kind of permission grant as an auth