Mark incoming certificate entries for finance before billing run

Your certificate intake entries arrive unflagged and cause duplicate IDs and delayed enrollments, holding up invoices. You get a confirmed certificate ID and updated table so billing proceeds before the next billing run.