Allow creating the first organization via qovery api organization

[jul-dan]

Summary

• GetAccessToken() validates the token by calling ListOrganization() and hard-fails with "you don't have any organization. Please create an account on https://start.qovery.com ." whenever the list is empty — before the actual request is even sent.
• This blocks every qovery api ... call for a brand-new account, including the org-creation call itself: qovery api organization --field name=... --field plan=..., which qovery api --help documents as a first-class example.
• Net effect: a new user cannot bootstrap their first organization through the CLI at all, and has to detour through the web console just to create it — even though the CLI's own docs say otherwise.

Fix

• Extracted the existing logic into getAccessToken(skipOrgaCheck bool), keeping GetAccessToken() behavior unchanged for every existing caller.
• Added GetAccessTokenAllowNoOrg(), used only by runAPI (cmd/api.go) when the request is exactly POST /organization — the one legitimate case where having zero organizations is expected.
• Every other qovery api call (and every other command using GetAccessToken) keeps the existing guard against operating with no organization to scope to.

Test plan

• go build ./cmd/... ./utils/... and go vet ./cmd/... ./utils/... — clean (pre-existing go vet ./... failures in unrelated packages are due to missing generated mocks, unaffected by this change)
• gofmt -l cmd/api.go utils/context.go — no diff
• Manually verified end-to-end against production API with a brand-new account that had zero organizations:
  • qovery api organization --field name="..." --field plan=BUSINESS_2025 now succeeds (200, returns the created org)
  • Confirmed the org is real via the Console
  • After a fresh qovery auth --headless (to pick up the new org's role claim in the JWT), qovery api organization (unpatched binary) lists it normally, and every other command continues to correctly reject zero-organization accounts

🤖 Generated with Claude Code

---

Summary by cubic

Allows qovery api organization --method POST to create the first organization on a new account instead of failing with "you don't have any organization" before the request is sent. GetAccessToken() now takes a skipOrgaCheck bool; every call site passes false except runAPI for the exact POST /organization path and auth status, which pass true so zero-organization accounts can create their first org and still be recognized as authenticated, while all other commands keep the guard.

^{Written for commit 64753e3. Summary will update on new commits.}

[cubic-dev-ai]

All reported issues were addressed across 2 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 173 files (changes from recent commits).

<sub>Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic</sub>