User-facing endpoints for the pending-peering-approvals UI surface. GET lists the user's own pending subscriber rows joined to parent peering requests. DELETE cancels a single subscription; if it was the last subscriber, cascade-deletes the parent (admin queue updates via federation_peers_changed). Authorization: subscriber.userId must match request.userId.