Consider if mapping `record.credential.id` can be checked for a match when setting status

Consider adding an additional sanity check here:

https://github.com/digitalbazaar/bedrock-vc-status/blob/v2.1.0/lib/status.js#L89-L91

That ensures that the `statusCredentialList` in the provided status entry from the VC matches the `record.credential.id` in the BSL VC that has been fetched. Consider proxy cases and whether checking this would disrupt any other features.