Add soft delete for revoked devices

Admins could only revoke devices, so never-enrolled and revoked
inventory rows piled up with no way to remove them. Soft-delete
is limited to REVOKED devices (revoke first), and ITAM GC now
hard-deletes PENDING/REVOKED orphans with no API key, postures,
or valid enrollment token—including user tombstones without
history.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

packages/ui/src/Atoms/Icons/index.tsx

@@ -112,6 +112,7 @@ export { IconBrandX } from "./IconBrandX";
 export { IconGlobe } from "./IconGlobe";
 export {
   ArrowsClockwise as IconArrowsClockwise,
+  Eject as IconEject,
   Envelope as IconEnvelope,
   LockOpen as IconLockOpen,
   User as IconUser,