revoke token

[M0roSan]

Implement revoke token functionality. Currently, generated tokens are either expired or manually revoked. No-longer-needed token should also be revoked programmatically.

AC:

generic path revoke which accepts below to revoke
{
"id": ,
"token_id": ,
}

we'll want a control that a only generated token can be revoked by the requested entity. plane /revoke endpoint may not be sufficient for it.