invalidateSessionState

Drop the cached session so the next root fetch is forced to bootstrap a fresh one. Called by the fetch queue after a content 401/403 — Google's session tokens are long-lived but not eternal, and on expiry every tile URL minted under the old session is dead.