Expand the VoucherStore interface to support two-phase spending

Instead of immediately extracting passes, get them and later mark up the store
with the outcome of the attempt to use them.