Function session_authorization_limits 

fn session_authorization_limits(
    session: &SessionEntry,
) -> Result<Option<Vec<CanonicalTokenLimit>>>

Converts stored session limits into canonical form for authorization comparison.