Revoke Admin Api Key

Revoke one of the admin's own API keys.

Idempotent: revoking an already-revoked key returns 200 ok. Scoped to the calling admin's own keys; an admin cannot revoke another admin's keys through this endpoint (a separate force- revoke surface would handle that, with stricter audit).