Presentation API: Filter expired/revoked credentials on egress

[paullatzelsperger]

When the query resolver collects all verifiable credentials to be packaged into a presentation, it should filter out expired ones and revoked/suspended ones.

Note that this must be done in-memory, because the revocation check potentially requires a remote call.