Revoke a session token

Adds the JWT jti to the revocation blocklist until natural expiry.

Stateless tokens can't otherwise be invalidated; the blocklist persists the revocation in Redis and is checked by session-auth dependencies.

curl -X POST "https://loading/auth/logout" \  -H "Content-Type: application/json" \  -d '{    "session_token": "string"  }'

{
  "status": "string"
}

{
  "detail": [
    {
      "loc": [
        "string"
      ],
      "msg": "string",
      "type": "string",
      "input": null,
      "ctx": {}
    }
  ]
}