Stores a session token's SHA-256 digest, account reference and creation time.
Ithibati.Identity.Sessions issues and validates tokens. Deleting the row revokes the token
for subsequent requests and LiveView mounts. Disconnecting already-open sockets is handled
separately by Ithibati.Web.Gate.