Disable expired service subscriptions when lead stage updates

Subscription-backed leads hit a configured pipeline stage without subscriptions being disabled, causing billing mismatches and stale customer access. It disables the linked subscription so teams reconcile accounts before the next billing run.