Revoke wallet-unit status subject

Records an irreversible revocation event and updates the backing status-list entry when a status subject reference is supplied. This is the production publishing path for WIA/KA and secure-component revocation; it does not implement notification, reset, or PID-provider orchestration.