Update internal employee records from payroll webhook events

You get payroll webhooks for hires, terminations, and updates that never reach HR records, creating provisioning gaps. Keep employee rows accurate so IT and HR can provision access same day.