[api] rework how subscriptions work …

We need to be able to have multiple roles per event - and let users override
them. The previous model only allowed on role per event, which might have been
'none'

But if users want to still get mails for 'creator' role, but ignore 'maintainer',
they need to be able to black out 'maintainer' without touching 'creator' role