Plugin should avoid using revoked tokens

[mickmister]

If we perform an API request using a user's token, and we receive a response noting that the token is revoked, we should:

• delete the token from the KV store, declaring the user as disconnected
• and notify the user via DM that their token has been revoked, and that they will need to reconnect their account in order to use the plugin

cc @aaronrothschild for this approach

Issue created from a Mattermost message by @thiefmaster.

[aaronrothschild]

Approach seems fine to me, please include a link for the user to follow in the notification we send that let's them easily re-auth their account without much thinking.

[aelishRollo]

I would like to work on this

[mickmister]

It's all yours, thanks @aelishRollo! 👍🤫