Unless the computer managing the AD accounts is not connected to the internet, then it could update Discourse when changes are made to those accounts.
No. The AD server will be generating the API calls.
I think my point is that whatever code is generating the CSV file could just as easily generate the API calls necessary to do the updates.