pub fn is_session_hello(first_frame: &[u8]) -> bool
True when the first plaintext frame is a SessionHello (server-side negotiation detection). A plaintext envelope frame is NOT a hello.