Function validate_session_authorization_policy 

fn validate_session_authorization_policy(
    session: &SessionEntry,
    auth: &KeyAuthorization,
) -> Result<()>

Ensures authorization expiry, limits, and call scope match the stored session policy.