fix(auth): include subscription in auth status for balance ring

Refresh/login previously dropped active subscription from the client user
payload, so paid users saw a 0% balance ring despite valid plan quota.

Co-authored-by: Cursor <cursoragent@cursor.com>

server.mjs

@@ -635,6 +635,7 @@ attachPortalCoreAuthRoutes({
   resolveSkillRuntimeForClient,
   resolveAgentCodeRunForClient,
   resolveGoalRunForClient,
+  getSubscriptionService: () => subscriptionService,
   getPlazaSeo: () => plazaSeo,
   plazaClientIp,
   logger: console,