This allows applications to build a listing of all credentials in wallets, regardless of its status (expired/revoked). Otherwise, there's no way to clean up revoked/expired credentials (or even find out about them).
We could extend the List() call, but that similarity to the issuer's API calls (there's an existing SearchIssuedVCs() API call) is probably better.
Support no search parameters for now (not needed).
API path should be /internal/vcr/v2/holder/{subjectID}/vc/search