logout

Revokes the current tokens on the authorization server, then clears the persisted session. If revocation fails (network error, missing endpoint), the local session is still cleared.