Updates both UiAuthController listings (Auth flat + security/) so future sessions know /logout exists, that it bumps token_revoked_before with a +1ms race-safety bump, and that it audits under AuditCategory.AUTH. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>