Revoke a user's active consents — either a specific set (via consents) or all of them (via all: true). Active means the consent is currently in granted or implicit status; consents in pending or revoked status are silently skipped. Returns the user resource with the consents relation loaded so the caller can see the resulting state.