Promotion and coupon usage limit bypass via race condition

More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-h76r-rr27-3gm4...