Function create_image_cfs_session 

pub async fn create_image_cfs_session(
    infra: &InfraContext<'_>,
    token: &str,
    vault_base_url: &str,
    k8s_api_url: &str,
    image: Value,
    ref_lookup: HashMap<String, String>,
    ansible_verbosity: Option<u8>,
    ansible_passthrough: Option<&str>,
    dry_run: bool,
) -> Result<CfsSessionGetResponse, Error>

Translate one SAT images[] entry into a CFS session and create it.

Returns the created [CfsSessionGetResponse] without waiting for the session to complete (the CLI drives monitor + stamp steps itself). Caller-access validation for the image’s target groups must be done BEFORE calling this function (see crate::service::authorization::validate_user_group_vec_access).