Grant new student access for coordinators before billing run

Your signup webhooks arrive without provisioning, causing students to miss access and delay onboarding. Students gain course access with an expiry set so coordinators can confirm enrollments before the next billing run.