... aaaand breakthrough!

Finally had time and figured a way to build Docker images containing proper Apache2::Cookie and other dependencies and restoring the session handling to use the newer frameworks. Working through site by site based on the container image now; we should be back up and running just fine within the next 48 hours.