Revokes an API key, making it permanently unusable.
Authentication: Requires valid JWT or API key. User can only revoke keys from their account.
JWT token from Auth0
Account's external ID (format: acct-xxx-v1)
"acct-xyz789-v1"
User's external ID (format: user-xxx-v1)
"user-abc123-v1"
API key's external ID