Move end role notifications to day after end
By moving the notifications to midnight on the day they expire we simplify the work of systems integrating with greg. The frontend has also been updated to say that end dates are "to (including)" to clarify that the roles are valid on their last day.
Resolves: GREG-2688