Create subitems in target when credential status changes

Your onboarding items with credential updates sometimes fail to copy subitems, leaving provisioning incomplete. The flow creates matching subitems so coordinators have complete records within minutes.