Create Pending Subscription

Pre-registers a subscription's email/tier before Razorpay ever calls back. Called server-side by the web app's checkout route immediately after creating a Razorpay subscription, so subscription.activated can trust our own DB row instead of webhook-supplied notes.email for a brand-new subscription_id (closes the spoofing gap noted at the top of the webhook handler below).