Schedule cancellation at period end

Sets the subscription to cancel when the current period ends. The user keeps full access until then; entitlements do not change today. Reversible with POST /api/v1/billing/reactivate while the period is still running.

Broker admins only, and refuses API-token auth.