web: adapter — add Session.sessionId, SavedSearch DTO; fix composite-id call sites
web: project detail route scoped via ?cwd= sessions filter