Run speaking through a safe backend session.

Speaking sessions bootstrap through secure server contracts only. The UI can show lifecycle state, transcript handoff, result merge, and diagnostics without exposing provider keys.