Immediately revoke one active API key owned by this account.

Costs nothing quota-wise and returns no credential material. A foreign, unknown, or already-revoked id is the same not_found response, preserving owner isolation. Recover by listing keys and choosing an active id; for scope_missing use an owner-authorized key, and for rate_limited or service_unavailable wait retry_after_sec before retrying once.