Security fix: removing a member from an org now immediately revokes their access to that org's shared spaces

Removing a member from an org now immediately revokes their access to all of that org's team spaces — previously the space membership persisted after the org removal, leaving the former member able to read shared content. The change also writes an "access revoked" event to the Change History audit log for each affected space, so offboarding is fully traceable.