Remove course access when deal moves to drop-out

Your learner enrollments stay active after a deal drops out, causing access and billing mismatches. Remove course group access automatically so coordinators and billing see correct status same day.