feat: Add session id in heuristic abuse

[alex-alecu]

Easily find what session has possibility of abuse /admin/users/..../heuristic-abuse

[kiloconnect]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

This PR cleanly adds session_id (sourced from the X-KiloCode-TaskId header) to the microdollar usage tracking pipeline. The implementation is thorough and consistent:

• Schema & Migration: New session_id text column on microdollar_usage_metadata, view updated to expose it.
• Header extraction: Both OpenRouter and FIM routes now use extractHeaderAndLimitLength (500-char truncation) — the OpenRouter route previously used raw request.headers.get(), so this is a security improvement.
• Pipeline plumbing: MicrodollarUsageContext → extractUsageContextInfo → UsageMetaData → SQL INSERT all correctly thread session_id through.
• All creation sites updated: OpenRouter route, FIM route, dev consume-credits, admin insert-usage-record, benchmark script, and all test helpers include session_id.
• Tests: Good coverage — verifies both null and non-null session_id storage.
• Admin UI: Column added (hidden by default) for session display.
• No GDPR concern: session_id is a task identifier, not PII.

Files Reviewed (11 files)

• src/app/admin/api/users/[id]/dev/insert-usage-record/route.ts
• src/app/admin/components/UserAdmin/UserAdminHeuristicAbuse.tsx
• src/app/api/dev/consume-credits/route.ts
• src/app/api/fim/completions/route.ts
• src/app/api/openrouter/[...path]/route.ts
• src/db/migrations/0024_real_ikaris.sql
• src/db/migrations/meta/0024_snapshot.json
• src/db/migrations/meta/_journal.json
• src/db/schema.ts
• src/lib/processUsage.ts
• src/lib/processUsage.test.ts
• src/scripts/usage/benchmark-insert-usage.ts
• src/tests/helpers/microdollar-usage.helper.ts

[marius-kilocode]

We don't need an index on it do we?