Race on idempotent payment webhook

Duplicate subscription activations appear when payment provider retries webhooks during a network blip.