fix(session): prevent process restart ID collisions

[chicoxyzzy]

Summary

• consume the shared bridge contract that creates restart-safe session IDs
• prevent host recovery from seeing the same process-scoped ID after a bridge restart
• pin the consuming adapter contract with independent-server and fork/source ID regressions

Validation

• make release-check
• adapter-level restart/fork regression repeated 20 times
• opt-in authenticated real-CLI smoke: prompt, workspace tool use, session reload, and cancellation
• three independent exact-head reviews are clean

Dependency

• waits for feat(commandbridge): harden native session recovery acp-adapter-kit#27 and its v0.1.1 release
• replace the temporary pseudo-version with v0.1.1 before merge