> one time charge, this one is tricky as restricting access requires a back-end that needs ongoing maintenance and server costs

If a browser extension is allowed to use license keys (not sure on the various store rules i.r.t. browser extensions), you could create a timed license key that is cryptographically signed.

No back-end required for that.