Customer organizations

Staff read customer accounts here, and administer one from the account it belongs to: creating an organization, inviting a customer user, moving a package seat and suspending or reinstating a membership or a whole account are all staff operations in this build. None of them is a single click — each is previewed here, decided by an independent staff approver, and only then committed. What staff cannot do: hold a membership of a customer organization (the server refuses it), buy licence capacity (`billing.manage`, the customer's own administrator, with no staff endpoint at all), or read customer AI conversations, which are not visible to staff at any permission level.