feat(api-key,js-sdk,dashboard): allow deleting api keys only once its revoked (#9118)

what:

- module only deletes api keys once its revoked
- disables ui elements


https://github.com/user-attachments/assets/437821ae-497e-4b59-b02c-4a6ff36e6a30

RESOLVES CC-106
RESOLVES CC-105
RESOLVES CC-104

integration-tests/http/__tests__/api-key/admin/api-key.spec.ts

@@ -1,4 +1,4 @@
-import { ApiKeyType, ContainerRegistrationKeys } from "@medusajs/utils"
+import { ApiKeyType } from "@medusajs/utils"
 import { medusaIntegrationTestRunner } from "medusa-test-utils"
 import {
   adminHeaders,
@@ -372,9 +372,7 @@ medusaIntegrationTestRunner({
       it("should detach sales channels from a publishable API key on delete", async () => {
         const salesChannelRes = await api.post(
           `/admin/sales-channels`,
-          {
-            name: "Test Sales Channel",
-          },
+          { name: "Test Sales Channel" },
           adminHeaders
         )
 
@@ -393,9 +391,7 @@ medusaIntegrationTestRunner({
 
         const keyWithChannelsRes = await api.post(
           `/admin/api-keys/${api_key.id}/sales-channels`,
-          {
-            add: [sales_channel.id],
-          },
+          { add: [sales_channel.id] },
           adminHeaders
         )
 
@@ -415,6 +411,21 @@ medusaIntegrationTestRunner({
           }),
         ])
 
+        const revoked = await api.post(
+          `/admin/api-keys/${api_key.id}/revoke`,
+          {},
+          adminHeaders
+        )
+
+        expect(revoked.status).toEqual(200)
+        expect(revoked.data.api_key).toEqual(
+          expect.objectContaining({
+            id: api_key.id,
+            revoked_by: expect.stringMatching(/^user_*/),
+          })
+        )
+        expect(revoked.data.api_key.revoked_at).toBeTruthy()
+
         await api.delete(`/admin/api-keys/${api_key.id}`, adminHeaders)
 
         const deletedApiKeys = await api.get(