Function dev_session 

pub fn dev_session(webid: impl Into<String>, is_admin: bool) -> DevSession

Build a dev-session bypass. Callers are expected to gate this on a top-level ENABLE_DEV_SESSION=1 or similar environment check — the helper itself will not read env to avoid accidental activation.