handle event customer.subscription.created to controller

This MR adds end-to-end support for Stripe’s customer.subscription.created webhook, from controller registration through payload validation, caching, and downstream dispatch.

Closes IA-647