Developersauth
POST /api/v1/auth/logout
Revoke refresh token; optional deviceToken drops push registration · Public
Machine-readable contract: GET /api/v1/openapi. Missing Stripe, APNs, FCM, or OAuth keys return 501 or log-only — never a fake success.