### End the current session

`POST /api/v1/auth/logout`

Revokes the calling session's token id, so it stops working immediately rather than at expiry.

- Authentication: manager session (JWT) or API token
- Not available to API tokens: this route requires an interactive manager session

#### Response — 200 OK

```json
{
  "data": { "ok": true }
}
```

#### Errors

| Code | Status | When |
| --- | --- | --- |
| `ERR_FORBIDDEN` | 403 | the caller holds an API token — this route refuses machine credentials |

#### Note

Best-effort by design: it answers ok even if the revocation write failed, because the worst case is a token that dies at its natural expiry. Do not treat ok true as proof the token is dead.