Admin Revoke User

Revokes admin access (soft: stamps admin_users.revoked_at; re-adding clears it). Rejects self-revocation, so the last admin can't lock out. The UUID param type canonicalizes casing before the self-check compares.