Just FYI, your points in 8 are pretty much not going to happen, with the exception of "Nice" URLs. I think the entirety of Drupal uses sessions for the user system, and Ubercart uses it for the orders system. Cookies are almost avoidable in every day life as well, and given that, PHP keeps track of cookies in .. you guessed it. Sessions. Is there a reason why you have those restrictions?

The rest of it looks like it's pretty much Ubercart right out of the box, with the exception of Coupons and Discounts - those modules might still need some work.