Add a native workflow trigger that runs when a ticket's Due on date is reached. It should fire at the actual due time, without requiring an hourly scheduled agent or external polling.