Create & arm a mandate

Arming a mandate is a real authorization: once armed, a matching GitHub release webhook will immediately start real, paid CAP orders up to the budget below.