11050.breaking.md

Remove owner_access_key from REST v1 session API; resolve owner_id via current_user() in the service layer. Clients must migrate to owner_id (user UUID) for delegation.