API endpoint to invalidate tokens

[zomglings]

Users should be able to POST to the endpoint to do things like:

• Remove all tokens older than N days.
• Remove all tokens older than N days that don't have infrastructure as a note.