Upload certs to central subject records and flag source

Course certificates arrive without attachments, leaving coordinators unable to close participant records. Attachments land in central subject records so HR can finish training logs same day.