Function privatePlanKey

The same key narrowed to one session, for the private fallback.

Isolate-local only, never a KV key (roleSeen already holds raw cookies here, and writeEdgePlan takes only a shared key).