Idempotent writes

Keying the upsert on Stripe's id lets five code paths write one subscription row

A webhook-only writer paywalled a customer who had already paid, because the browser redirect beat the event by seconds. The fix was making every write idempotent on Stripe's own identifier, not picking the right writer.