Credentials that stay up to date

Issuers will be able to update managed credentials after issuance, and holders will be told clearly when their credential changes.

This work adds standards-based credential refresh support across issuer and wallet workflows.