STEP_034G_CREATE_CANARY_TEST_SUBSCRIPTION BLOCK_NEW_PEER_OR_JOB_NOT_FOUND
timestamp: 20260708-120935

Created test WGPay subscription:
- subscription_id: 
- peer_id: 
- job_id: 
- node_id: 
- tunnel_ip: 
- client_config_endpoint_is_final: 

Counts:
- peers_before_count: 20
- peers_after_count: 20
- peer_delta: 0
- jobs_before_count: 36
- jobs_after_count: 36
- job_delta: 0

Secrets:
- full create response is stored only in private remote backup; not published

Rollback:
- cancel subscription via VM121 backend:
  POST /admin/subscriptions//cancel
- or disable peer:
  POST /admin/peers//disable

Changes:
- created one test subscription/peer/job through WG Access backend
- no manual WG write
- no WG reload by this script

Next:
- verify agent/job applied the peer to MGTS VM100 wg_paid, then use tunnel_ip for DSCP canary source.