Create employee access revocation ticket and assign owner

Role-change webhooks lack tracked deprovisioning tasks, leaving elevated access unrecorded and owners unclear. Tickets are created and owner-assigned so access is revoked within minutes.