Rotate the share link

Mints a new share link and stops the old URL from granting access. Everyone you shared it with needs the new one.

Rotation does NOT evict anyone who already redeemed the old link. Their grant is a stored row, not a property of the URL, and it survives rotation — accessVersion is deliberately not bumped here. So rotation alone does not undo a leak: rotate to close the door, then DELETE .../members/{memberIdOrEmail} for anyone who already walked through it.

Bodyless: the scenario is the whole request, and the new secret is minted server-side by definition.