Remove legacy student access from course enrollments

Upgraded members sometimes stay in legacy courses, confusing coordinators and bloating rosters. Remove legacy access automatically on upgrade webhooks so coordinators see correct rosters same day.