Cli Logout

Revoke the presented credential server-side (logout default).

Revokes exactly the api_key behind the bearer the CLI sent (its stored session). Idempotent and no-op for a web JWT (no api_key row).