SessionContextEpoch.advance fencing

Trap: renewing SessionExecutionClaim and then updating SessionContextEpochTable.snapshot looks fenced because ownership was checked immediately beforehand, but takeover can occur between statements and let a stale owner mutate durable context. Fix: perform renewal and snapshot mutation inside one immediate SessionExecutionClaim.transaction(...); test takeover rejection and prove a failed snapshot update rolls back renewal.