Set access request to revoked after manager review

Manager-confirmed reviews mark accounts for revocation but requests remain open, creating orphaned permissions. The workflow updates request status and admin notes so IT closes revoked access same day.