-- 0008_refresh_tokens down: drop the refresh-token table (and, implicitly, its
-- indexes). Revoked grants carry no audit value once the feature is rolled back.
DROP TABLE IF EXISTS refresh_tokens;