CTSA Tenant Leak Audit

Finds CTSA-only users incorrectly assigned to the Jewelers Connect tenant.