Remove former staff access for security engineers before review

Your deactivation requests arrive without verification, causing lingering user access and audit gaps. Security engineers receive confirmed deactivations with audit notes before the next security review.