Allow revoking a lock id

In addition to revoking an individual key, it would be great to be able to revoke all keys with the same id at once.

No files, tests, or entry points are named. Start by locating the existing individual-key revoke operation and the lock/key data model, then trace how an id is stored and matched. Done means a caller can revoke every key sharing an id at once while individual-key revocation continues to work; confirm the behavior with the project's existing tests or verification workflow.

Written by the indexing model from the issue text.