Sync local subscription state with Stripe.

Safety net for when webhooks fail or are delayed. Checks Stripe for the customer's actual active subscription and updates the local DB + user plan accordingly.

Called by the frontend billings page when it detects a mismatch (e.g., paid invoice exists but user is on free plan).