RSUs create two taxable events: income at vesting and potential gains at sale. Here’s how to avoid surprise tax bills.