post:
  summary: Log out
  operationId: logoutUser
  tags:
    - Users
  description: >
    Clears the `token` cookie by overwriting it with an empty value and
    `max-age=0`. No authentication is required — the endpoint is always safe
    to call even if the cookie is already absent or expired.
  responses:
    '200':
      description: Logged out. The `token` cookie is cleared.
      headers:
        Set-Cookie:
          description: Expired auth cookie that instructs the browser to delete it.
          schema:
            type: string
            example: token=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0
      content:
        application/json:
          schema:
            $ref: '../components/schemas/SuccessResponse.yaml'