revoke

Revoke the Drive appDataFolder grant (#246 — true backup disable). After this the app no longer has Drive access; the next authorize returns AuthorizeOutcome.NeedsConsent. No-op if nothing is currently granted. Best-effort: a network failure to reach the revoke endpoint is logged, not thrown (the local grant is gone from the user's intent either way).