Update candidate referral consent for recruiting team before workday

Your referral consent submissions arrive as tokenized webhooks, causing duplicate accepts and missed consent flags. Recruiters get verified consent updates and a used-token audit so candidates are accurate before the next workday.