Revoke a membership (community admin only; the owner cannot be removed)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.