Remove community access when CRM tag is applied

Community membership often lags CRM tags, leaving members with incorrect access. This revokes community permissions and clears the CRM tag so membership is accurate same day.