mcp: ensure keepalive goroutine is started exactly once

[cryo-zd]

change:

Reorder the logic within ServerSession.initialized to ensure ss.startKeepalive is called only after the session's state is validated.
The startKeepalive function is now only invoked when the session is first transitioning from initialize to initialized state.

Fixes #313

[findleyr]

Thanks!