Remove status on challenge objects

[jsha]

Right now, authorizations and challenges each have statuses, but they are mandatorily the same, since an authz becomes valid if and only if one of its challenges becomes valid. We should simplify by removing the copy of status on the challenge object.

We've seen some bugs in the wild related to separating these.