List active session overrides scoped to the caller's tenant — useful for auditing dangling overrides or confirming an override is in effect before retrying