**Goal:** Ensure the user doesn’t consume Jira/Confluence seats. **Tasks:** * [ ] Research how Atlassian allocates seats (product access groups vs per-user toggles). * [ ] Identify API(s) to **remove product access**. * [ ] Input: `email` or `account_id` * [ ] Steps: resolve account → remove from access groups → deactivate. * [ ] Verify seat released via product access listing. * [ ] Emit audit JSON (products removed, groups changed). **Acceptance:** * Dry-run mode. * Idempotent. * Unit tests for “no product access” case.