feat(auth): Global and per-user authentication cache revocation

[benidk]

Description

Following this PR
Administrators need a way to invalidate active authentication/approval bypasses immediately (e.g., during offboarding, key compromise, or policy updates).

Proposed Solution

Add endpoints and Web Admin UI actions to clear the authentication approval cache globally and per-user.
(Optional) Display a list of currently active approval bypasses in the admin panel so administrators can view active cached sessions.