fix: session: Zero-initialize data array

Found via code quality scan -- the session packet buffer was never properly initialized before data was taken in.