RevokePermissionTool

pm revoke <pkg> <perm> — revoke a runtime permission from an app. Idempotent. Treated as failure if the command exits non-zero or writes to stderr.

Privilege: requires a working ShellBackend.

Params: package_name (required), permission (required, fully-qualified).

On success the result map carries success (true), package_name, and permission.