Allow admins to sign out all active SSO users#854

Add a board-level action that lets admins revoke all active SSO sessions with a single click. Once signed out, users will need to authenticate again through the configured identity provider before accessing the board. This gives admins a self-service way to immediately enforce access changes after disabling SSO, rotating secrets, or removing users from their identity provider.