Enable access Revoke access Clear revoke

Sets llm_gateway_enabled_at / llm_gateway_revoked_at to now (or null). Per-region.