review: simplify session-disambiguation test assertion (staticcheck QF1001)

Use a set-membership check instead of negated disjunctions to satisfy staticcheck's De Morgan suggestion.