Effectively, I need to be able to establish quickly which sessions are using a high amount of CPU.

I'd want for example, a job to run every 5 minutes, which pulls the top 5 CPU consumers and writes them to a log file. If the client were to complain about performance problems, a quick check of the log file would the first port-of-call.