SessionCodeInfo

Session-code data; never persisted. Possessing code within expiresAtEpochMs is the entire trust decision -- there is no on-device approval step. See SessionCodeAuthority.exchange and docs/THREAT_MODEL.md.