allocate quota for membership instead of identity

When fees of anonymous tx were not refundable, it made sense to allow quota for newly created identities before validation. Know, it makes more sense to allocate quota for membership, and react to membership events instead of identity events for quota creation and removal. Also, revoked identities should unlink their account for clarity.