Revoke an API key so it stops working. This cannot be undone.

The key's creator can revoke any key they created. For publishable keys and merchant-pinned secret keys, a user of that merchant, a tenant owner or admin on the merchant's tenant, and Zenoz staff can also revoke them. payout_write and agent_onboarding keys can be revoked only by their creator. Anyone else gets a 404.

The revocation is recorded in the key's audit history with the user who did it.