Stage 43 — API Logout / Token Revocation

POST /api/v1/auth/logout/
Authorization: Bearer <access_token>

Revokes the current signed API token without a database schema change. Revoked-token records are kept in the server temporary directory and are checked by the existing API authentication layer.
