Move sessions, tokens, passkeys, OAuth grants, notifications, org invitations, AI endpoints and account lifecycle into AccountState; sites, LFS and editor sessions into their scopes
New session and token formats embed their account (or repo) id so lookups skip the directory; older tokens resolve through scope locators. Repo-less sites get their own 'site:<id>' scope; LFS reference counting replaces the D1 triggers in code.
124 files changed+3332−1230
Rendering diff…