Disconnect Endpoint

Drop one connection's authorization and keep the connection itself.

The connection survives with its id, slug, name, URL and tool policy intact, so every agent configured against it stays configured and one Connect reconnects it. Deleting the endpoint is the other operation, and it is not this one.

Only this connection's grant goes. Another account at the same server keeps its own, which is what the connection-keyed grant is for.

Idempotent: disconnecting something already disconnected returns the endpoint and changes nothing, so a repeated click or a retried request is not an error.