Problems: replay & revocation components

Low-level designs for the components that decide whether a valid-looking credential or message should still be accepted: a nonce replay cache, a token revocation list and an idempotent webhook verifier. Each one is about bounded state, time windows and failing closed.