v3.4.141

Fix hide_shadow_revoked filter never suppressing shadow rows in the Access Manager.

prepare_items() set hide_shadow_revoked for every status tab except 'revoked'. On every other tab the flag was redundant with a stricter co-applied grant_status filter, and on the one tab where its exemption logic could matter (Revoked, which filters grant_status = 'revoked') it was disabled. Net effect: stale shadow revoked rows (superseded by an active reassigned-recipient row) were never hidden anywhere. Apply the flag unconditionally.