Soft-disable a staff user — admin sessions revoked
delete
/v1/admin-auth/users/{id}Stamps disabled_at and revokes every active admin session for the row. Refuses to disable the last enabled admin and refuses self-disable to prevent lockout.