Record clearance of a legacy revoke_failed account

Which of the two decisions the operator is recording.

Clearing a dead letter always means the same thing to the MEMBER — the fence lifts and they can connect that app again — but it can mean either of two opposite things about the CREDENTIAL, and the COGS orphan report needs to know which. Confirmed in the provider's console: it is dead, and reporting it as a live charge for ever is a false positive nobody can clear. Accepted as a leak: it may still be billing, and quietly dropping it from the report is how a real cost disappears.

Required rather than defaulted, because either default silently answers a money question on the operator's behalf.

What the operator's clearance did.

cleared is false for two different reasons, and refusal says which. Reported rather than raised, so a double-click is a no-op with an honest answer instead of an error about a state the operator already wanted — but "nothing to do" and "a worker still owns this" are opposite next actions, so they are not reported as the same thing.