Correct Solridge enrollment scope: retain 8 approved, revert 14 to unenrolled

BOLT-1741 remediation. Grace explicitly confirmed in Slack #grace-and-bots, message 1785965631.470089: leave the 8 previously listed enrollment IDs enrolled/approved and change only the remaining 14 IDs back to unenrolled. Must revalidate exact target ledger immediately before mutation; use Program GraphQL updateEnrollment only, no direct DB writes; execute controlled batches and record post-mutation verification.