A certificate whose status stays alive

A signed certificate proves it has not been altered, but not that it is still valid. Without a registry, revocation does not exist: the document keeps verifying after its issuer has withdrawn it. This release closes that gap.

Added

• Registry publication for an issued certificate. Sending goes through a queue that resumes where it left off: a network drop delays publication, it does not lose it. Nothing is published until the issuer asks for it.
• Revocation from the app, with a mandatory reason and a timestamp. The row is never deleted: the history stays readable, and the registry answers later verifications.
• Public lookup returns only the essentials — number, version, status, key fingerprint, issuer. Never a price, a buyer, provenance, or an internal note.