[server] Finish implementing session establishment, including an end-to-end test

[mcy]

The only part that was missing was to actually add the HMAC of the alias cert; as of this PR, Manticore can establish a secure session.

Following up, we'll need to retrofit HostPort and friends to make use of the established key.