chore: remove allProblemIds from session response

Don't leak the full problem bank ID list to the client.

Co-authored-by: Cursor <cursoragent@cursor.com>