Update bulk TOS resetter to scope to the open tenant
Right now the bulk_tos_resetter.rb updates ALL students and reps to be unconfirmed. Let's add a tenant option to the service object that fixes that and makes the batches smaller for the DB to handle so the process doesn't time out.