Deducts credits from the user’s account.The amount must be positive. The balance is allowed to go negative so
that the spending-limit hook (which checks credit_balance <= 0)
will correctly block subsequent LLM calls. If auto-recharge is
configured, it is triggered after the deduction.