Mark learner records as certified before renewals lapse

Your learner completions arrive via webhook, leaving certification status out of sync. Contacts get certification flags updated so renewal and compliance reports reflect accurate status before renewals lapse.