fix(cloud): rework unsubscribed team cleanup and account deletion

[andrasbacsai]

Summary

• Record when a subscription ended. A new subscriptions.ended_at column is set when a row stops paying and cleared when it pays again. Past due counts as paying because the subscription is still in dunning. The migration fills it from updated_at for rows that already ended. Subscription::isPaying() and Team::subscriptions() are new.
• Team::subscriptionEnded() now requires the subscription row it ends. Every caller passes the row it acts on: webhooks, verify job, refund, cancel, fix and sync commands. Servers are only marked unusable once no other row of the team still pays.
• New DeleteTeamData action. It removes every record Coolify keeps for a team: servers, resources (including soft-deleted ones and ones without a destination), projects, backups, tasks, volumes, env vars, tokens, sources, S3 storages, settings and subscription. It runs nothing on the servers and does not release the team's DNS records at the provider.
  • purge() keeps the team, its members and default notification settings.
  • handle() also deletes the team.
  • It refuses to run on the root team (id 0).
• New FindOpenStripeSubscriptions action. It lists the Stripe subscriptions that have not ended for the given emails (matched case-insensitively) and customer IDs. This catches subscriptions that have no row in Coolify.
• cloud:cleanup-unsubscribed-teams rework:
  • --months is replaced by --days. The default is constants.cloud.data_retention_days (env CLOUD_DATA_RETENTION_DAYS, 30).
  • The retention period starts at ended_at. Teams that never paid count from when the team was created, and are only eligible if none of their members belongs to another team.
  • Teams with a paying row are never deleted.
  • Before deleting, the command checks Stripe. A paying Stripe subscription, or a failed check, keeps the team. Open subscriptions that don't pay are cancelled before the team is deleted.
  • A lapsed personal team of someone who is also in another team only loses its data; the team and its members stay.
  • Each team is deleted in its own transaction, so one failure doesn't stop the others. One summary notification is sent per run for skipped or failed teams.
  • The table now has Action, Subscription ended and Created columns.
• Account deletion:
  • On Cloud, owners whose single-member teams have no paying subscription can delete their account. Those teams' servers, projects and Git sources are removed from Coolify; nothing is stopped on the servers.
  • Every open Stripe subscription of the user's email and of the teams they own is cancelled first, including ones Coolify has no row for. Subscriptions of teams the user doesn't own are left alone.
  • The Stripe lookup for the confirmation text is cached for 60 seconds.
• CancelSubscription::cancelById() treats a subscription that Stripe already cancelled, expired or no longer has as cancelled, and ends the local row.
• Early fraud warning now cancels every subscription of the customer's email, not only the first row it finds.
• Local Horizon in Cloud mode runs all Cloud queues in the dev supervisor.

Breaking Changes

• cloud:cleanup-unsubscribed-teams --months is removed; use --days.
• Team::subscriptionEnded() now requires a Subscription argument.
• With the new 30-day default, the cleanup deletes far more than the old 6-month cutoff did, including teams that never paid. Run it without --yes (dry run) before the first real run.