Update user MFA flags for security engineers before renewals

Your directory MFA status reports arrive daily, leaving stale user records and missed compliance flags. Security engineers get reconciled MFA state for users and close gaps before renewals lapse.