fix: require billing permission to allocate concurrency and apply allocations atomically

Reallocating purchased concurrency across environments now requires
billing permissions, matching purchases, and allocations are applied
atomically so simultaneous changes can no longer exceed the purchased
amount.

Mono-RevId: 0ff535b7126ef285de9d815196545022ae2236b5