Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

fix(billing): improve security and error handling for ListSubscriptions

Security fixes:
- Always infer billing_id from org_id, ignore billing_id from request
- Prevents users from accessing other orgs' billing data by passing arbitrary billing_id

Error handling improvements:
- Only return empty subscriptions list for ErrNotFound (no billing account)
- Return proper errors for ErrInvalidUUID and database errors
- Add detailed error logging for debugging

Authorization changes:
- Keep ensureSubscriptionBelongToOrg checks for Get/Update/Cancel/Change subscription RPCs
- Remove ensureBillingAccountBelongToOrg check from ListSubscriptions (handled by inference)

Tested: curl call works correctly, returns empty list for orgs without billing accounts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>