Start employee offboarding for IT admins before access persists

Your offboarding webhooks arrive without authorization checks, causing orphaned accounts and access sprawl. IT admins receive validated offboarding triggers so access is removed before the next workday.