Revoke a sandbox session

Hard-deletes the session. The user loses the ability to send to that phone via the sandbox until they re-activate it. Existing conversations and messages already exchanged with that phone are untouched — revocation only blocks FUTURE sends.

Sessions belonging to other users cannot be revoked; the response is the same 400 as "session not found" so existence isn't leaked.