Turns one of the caller's own subscriptions on or off. This replaces
unsubscribing by deletion: a disabled subscription receives no new
notifications, but the subscription and the notifications already
posted to it are kept, so the user's in-app and email history is
preserved and the subscription can be re-enabled later.

A subscription that doesn't exist and one that belongs to another
user both return 404, so the route can't be used to probe which
subscription ids exist.

Re-enabling a subscription whose context has an organizationId
requires that organization to be the organization_id workspace and
the caller to still be a member of it. Disabling has no such check,
so a user removed from a workspace can still turn its subscriptions
off from any workspace they belong to.