Revoke all unused API keys

Revokes every live lasoak_ API key on the account that no agent has used yet: never exchanged at agentAuth and never used to connect, the keys the dashboard lists as "Has not signed in yet". The same action as Revoke all on the dashboard. Keys any agent has used are left alone. A key you just issued and have not used yet counts as unused, so do not call this while a new agent is still setting up.

A Firebase callable. Callables wrap the request in {"data": ...} and the reply in {"result": ...}. Send the id_token from /auth as a Bearer token. Free.