But once the Session is closed, the session should become eligible for garbage collection and every object associated with that specific Session will be garbage collected, including the TransactionObserver, right?

Why do you think the TransactionOvserver would leak after the Session is GC-ed?

Also, what do you mean by "spinning up shared sessions"? Sessions are not thread-safe, so they shouldn't be shared.