Notebook ids with a live kernel session, from the gateway's own store.

Exists for the artifact pull: the chat-session row's notebook_id is cleared when the agent detaches its notebook, but the kernel session (and its box, holding kernel-written artifacts) can outlive the detach. The gateway session store is the authority on which kernels are actually alive. Only notebooks the caller owns are returned.