Revoke an API key

Revokes the key and invalidates the account cache the three services authenticate against, so the credential stops working immediately instead of surviving the cache TTL.

Revoking removes the credential; it does not undo what the credential did. Workspace members it added stay members — the panel surfaces that separately when the revoked key held workspaces:manage.

A response other than 200 means the key may still authenticate: retry until it returns 200.

Session token only — an API key cannot revoke API keys, not even itself.