Grant upgraded course access for tagged students before renewals lapse

Your tagged students land without upgraded access, causing enrollment confusion and a support backlog. They receive upgraded access and have legacy offers revoked so billing and fulfillment stay clean before the next billing run.