feat: Revoke tokens by OAuth client ID

[nlebedevinc]

This feature would align with OAuth best practices and improve token lifecycle management.

Revoking tokens by OAuth client ID is critical for scenarios such as:
1. Decommissioning an OAuth client.
2. Managing compromised client credentials.
3. Enforcing stricter security policies.

Currently, it seems there is no direct way to revoke all tokens associated with a particular OAuth client.