Move end role notifications to day after end

By moving the notifications to midnight on the day they expire we
simplify the work of systems integrating with greg. The frontend has
also been updated to say that end dates are "to (including)" to clarify
that the roles are valid on their last day.

Resolves: GREG-2688