Revoke Company Sessions

Revoke every active SuperTokens session for a company's users.

Used at the WorkOS cutover: WorkOS sessions live client-side and are unaffected, but a SuperTokens session survives a login_provider_type flip for up to the refresh-token lifetime (~6 days idle). Revoking forces the company's users back through /auth, where the email-first router sends them to their newly-assigned provider. Reversible — users simply sign in again.