A003

auth: 'user', but ctx has no user: the context file never asked for the session.

Fix: Spread session(auth, request) into what src/context.server.ts returns.

Status in kerf@0.1.0: reported by @kerf-js/start when it serves or renders the route, and by kerf check and kerf routes --meta.