Update vendor risk register for reviewers before renewals

Vendor records arrive asynchronously, causing compliance gaps and missed renewals. Reviewers get updated rows with renewal dates and risk notes to finish assessments before renewals lapse.