Purge all user sessions and ephemeral caches platform-wide.
Sets a global token epoch so all existing access tokens are immediately
rejected. Purges ephemeral Redis caches and revokes all refresh tokens.
All users (including the caller) must re-authenticate after this action.