Add Session class to provide getUser() on call.session

Wraps SessionData and user into a Session class that handlers can use
via call.session.getUser() instead of accessing services directly.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

express/app.ts

@@ -3,6 +3,7 @@ import express, {
     type Response as ExpressResponse,
 } from "express";
 import { match } from "path-to-regexp";
+import { Session } from "./auth";
 import { cli } from "./cli";
 import { contentTypes } from "./content-types";
 import { httpCodes } from "./http-codes";
@@ -68,7 +69,7 @@ routes.forEach((route: Route, _idx: number, _allRoutes: Route[]) => {
             parameters: { one: 1, two: 2 },
             request,
             user: auth.user,
-            session: auth.session,
+            session: new Session(auth.session, auth.user),
         };
 
         try {