feat(jans-lock): Enhance evidence archiving features

Do not let retention silently erase evidence. The current 400-day deletion policy should produce a signed disposition record or retained deletion manifest containing record identity, digest, deletion authority, policy, and time. Sensitive claims can be cryptographically erased earlier, but their hashes and the fact of deletion should remain visible.