Pause Schedule Via Token

Flip is_active = FALSE on the schedule referenced by token.

Response is a minimal self-contained HTML page so the recipient sees confirmation even if they click from a mobile mail client that strips scripts. Idempotent: re-clicking a used link is a no-op.