Deactivate offboarded contractor accounts to prevent access before audit

Your offboarding webhooks lack reliable deactivation, causing lingering access and audit exposure. Operations gain assured deactivations and a compliance record before the next audit.