“An entity that retires a VCU and then creates a token is not, strictly speaking, tokenizing a VCU, but is instead creating an instrument that exists outside of Verra’s ecosystem”