Remove expired access tag from course enrollees

Your enrollments keep expired access tags, leaving subscribers mis-segmented and creating extra work for coordinators. Remove the tag when enrollment ends so campaigns and lists reflect access changes the same day.