fix(chat): support session IDs containing slashes in Retrofit endpoints (#473)

* fix(chat): support session IDs containing slashes in Retrofit endpoints

Set encoded = true on the @Path("id") annotations for all session endpoints
to prevent URL-encoding slashes, which caused 404 errors.

* chore: clean up inline comments — drop kanban metadata, align issue ref to #468

---------

Co-authored-by: M57 <hy4ri@users.noreply.github.com>

app/src/main/java/com/m57/hermescontrol/data/remote/HermesApiService.kt

@@ -126,7 +126,9 @@ interface HermesApiService {
 
     @GET("api/sessions/{id}/messages")
     suspend fun getSessionMessages(
-        @Path("id") sessionId: String,
+        // Preserve slashes in session IDs — backend generates IDs containing '/' characters (issue #468).
+        // Contract: The server-generated sessionId must only contain URL-safe characters (no ?, #, or spaces).
+        @Path("id", encoded = true) sessionId: String,
     ): Response<SessionMessagesResponse>
 
     @GET("api/sessions/stats")
@@ -134,7 +136,9 @@ interface HermesApiService {
 
     @PUT("api/sessions/{id}/rename")
     suspend fun renameSession(
-        @Path("id") sessionId: String,
+        // Preserve slashes in session IDs — backend generates IDs containing '/' characters (issue #468).
+        // Contract: The server-generated sessionId must only contain URL-safe characters (no ?, #, or spaces).
+        @Path("id", encoded = true) sessionId: String,
         @Body body: SessionRenameRequest,
     ): Response<Unit>
 
@@ -145,7 +149,9 @@ interface HermesApiService {
 
     @DELETE("api/sessions/{id}")
     suspend fun deleteSession(
-        @Path("id") sessionId: String,
+        // Preserve slashes in session IDs — backend generates IDs containing '/' characters (issue #468).
+        // Contract: The server-generated sessionId must only contain URL-safe characters (no ?, #, or spaces).
+        @Path("id", encoded = true) sessionId: String,
     ): Response<Unit>
 
     @POST("api/sessions/prune")
@@ -155,7 +161,9 @@ interface HermesApiService {
 
     @GET("api/sessions/{id}/prompt")
     suspend fun getSessionPrompt(
-        @Path("id") sessionId: String,
+        // Preserve slashes in session IDs — backend generates IDs containing '/' characters (issue #468).
+        // Contract: The server-generated sessionId must only contain URL-safe characters (no ?, #, or spaces).
+        @Path("id", encoded = true) sessionId: String,
     ): Response<SessionPromptResponse>
 
     @GET("api/system/stats")