Disconnect Integration

Disconnect an MCP integration and remove its locally stored credentials.

Deliberately does not check is_provider_enabled_for_org/the org's rollout flag: revoking your own org's existing grant must never be trapped behind a flag that got turned off or removed after connecting. disconnect_integration matches by org_id + provider_key alone, so this is safe regardless of catalog/rollout state.