Revoke a credential (LOCAL-only soft-delete)
Soft-deletes the credential by setting status=revoked. LOCAL only — BACEN is never contacted. The row is retained for audit but hidden from list/get; the freed institution code can be re-created. Emits credential.revoked via audit_outbox in one tx.
DELETE
Revoke a credential (LOCAL-only soft-delete)

