subscriptions: upsert by subscription key