The cron/webhook-only cross-tenant view. Deliberately NOT a
TenantBoundSubscriptionStore ([SUBSCRIPTION_TENANT_BOUND]?: never) so it can
never reach request-scoped code — the SystemApprovalStore posture.
Every subscription to (providerId, externalResourceId) ACROSS tenants —
each carries its own tenantId. The webhook's tenant-resolution authority:
a webhook payload NEVER names a tenant; the matched row does.
The cron/webhook-only cross-tenant view. Deliberately NOT a TenantBoundSubscriptionStore (
[SUBSCRIPTION_TENANT_BOUND]?: never) so it can never reach request-scoped code — the SystemApprovalStore posture.