Encode a minimum-version token in the session cookie; replicas refuse to serve reads below that version.