fix: per-user session isolation via ensure_session_id

fix: handle None session_id gracefully

feat: per-user data isolation, fix model name, clean gitignore