Add and remove regional community members before audits

Your join and leave web requests arrive unvalidated and leave out-of-region members in state spaces, creating compliance gaps. Keep memberships accurate so privacy reviewers close checks before the next audit.