Multi-org profile support for CLI authentication

[gmoon]

Requirement

REQ-CLI-025 — Multi-org profile support for CLI authentication

Summary

API keys are scoped to user + organization. The CLI needs org-aware credential management from the start (anti-pattern from GWS: single credential set, no multi-account).

Specification

• Active org context stored in config (~/.forkzero/config.yaml or similar)
• --org <name> flag to override per-command
• lattice auth login --org <name> to switch active context
• lattice auth status shows current org
• Scope normalization: sort + deduplicate scopes for consistent token cache keys

Lattice

• Depends on: REQ-CLI-023
• Source: SRC-AUTH-PATTERNS (Lattice CLI auth: adopt credential storage patterns from GWS CLI analysis #6)