POST /api/sessions
Create a clinical session (encounter).
Mount stack: resolveDeploymentScope, authenticateToken, setTenantContext, sessionTimeoutMiddleware, phiAuditMiddleware, consentGate, purposeBasedAccess('sessions', 'TREATMENT', 'OPERATIONS', 'EMERGENCY')