Remove offboarded education domain users and log audit before billing

Your unenrollment events land without action, causing license waste and stale group access that raise billing and compliance risk. Reduce costs and closure time by removing access, clearing membership fields, and logging changes before the next billing run.