Session state moved into named stores and environment reads centralised

Session reset and model fallback now read and write through named state stores rather than loose module state, the storage handle is passed explicitly through many more call sites including config writes and shutdown flushes, and several direct environment reads including NODE_EXTRA_CA_CERTS and CLAUDE_CODE_CLIENT_CERT now go through one accessor. No behaviour changes.