Sesh continuous ingestion needs a real session-change contract
Reusable ingestion boundary learned while tracing Sesh on 2026-09-07: a per-message private-object store must not be adapted by inventing one session-level Storage object. A safe session indexer should enumerate scoped changes with a durable `(updated_at, stable_id)` keyset curso…