owner membership hook
One login. One organization. Two customer doors.
Session cookie for dashboard work.
Organization API keys for scripts.
HMAC stays internal-only.