Add session data to Call type

- AuthService.validateRequest now returns AuthResult with both user and session
- Call type includes session: SessionData | null
- Handlers can access session metadata (createdAt, authMethod, etc.)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

express/app.ts

@@ -59,7 +59,7 @@ routes.forEach((route: Route, _idx: number, _allRoutes: Route[]) => {
         console.log("request.originalUrl", request.originalUrl);
 
         // Authenticate the request
-        const user = await services.auth.validateRequest(request);
+        const auth = await services.auth.validateRequest(request);
 
         const req: Call = {
             pattern: route.path,
@@ -67,7 +67,8 @@ routes.forEach((route: Route, _idx: number, _allRoutes: Route[]) => {
             method,
             parameters: { one: 1, two: 2 },
             request,
-            user,
+            user: auth.user,
+            session: auth.session,
         };
 
         try {