Revoke a credential (LOCAL-only soft-delete)
Revoke a credential (LOCAL-only soft-delete)
Soft-deletes the credential by setting status=revoked. The revoke is LOCAL only — BACEN is never contacted. The row is retained for audit history but hidden from list/get and is no longer updatable; the freed institution code can be re-created. Emits credential.revoked via audit_outbox in one tx.
DELETE
Revoke a credential (LOCAL-only soft-delete)

