Update referral status when CRM lead is denied

When CRM leads are flagged denied in referral workflows, referral records stay active and skew rewards and reporting. It marks the referral denied so program managers see accurate referral counts and avoid improper rewards same day.