M1 Multi-Organization Workspace Switcher & Tenant Isolation Inspector

Verify portable authentication (`WorkOSAuthAdapter` / `LocalDevAuthAdapter`), multi-org context switching, PostgreSQL `FORCE ROW LEVEL SECURITY` (`app.current_org_id`), and resolved module entitlements.