Lock token metadata (name, symbol, image, URI) by revoking update authority. Protect holders from changes.