Correct access on paused and canceled subscriptions

Access now tracks the true state of a subscription. A paused subscription correctly withholds access for as long as it is paused, and a subscription scheduled to cancel keeps access right up to the end of the period the customer already paid for.

Impact

Getting either of these wrong is a quiet way to lose trust. Cutting off a customer who paid through the end of the month feels like theft, and leaving access on for a paused plan gives it away for free. Because AppFunnel derives access fresh from subscription state, both cases now resolve correctly on every read, with no manual cleanup and no support tickets to chase.