Remove free-graduate roles for membership managers before renewals lapse

Your completed membership orders can leave legacy free-access roles attached, causing compliance gaps and revenue leakage. Membership managers reclaim correct access and protect recurring revenue before renewals lapse.