fix: auto-detect org membership via localStorage, remove manual button

fix: onboarding join org in iframe, sign-in on direct access

fix: simplify onboarding to join-then-oauth flow

feat: consecutive join/signin screens and sandbox status message

feat: require org membership to create sessions

feat: merge HF Space improvements