ACT 0.7: sessions, three production bridges, and auth-via-args

The previous posts focused on what ACT is — sandboxed components, one state. Most of the components on actpkg are pure request/response — crypto, encoding, random, time. They don't need a session because every do — thread_local! HashMaps keyed by std:session-id metadata, and the host had no idea wha