Ephemeral exposures: short-lived site and port or hostname with a TTL, for shark expose

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

accounts.go

@@ -100,6 +100,9 @@ func (s *Server) withOrg(needAdmin bool, fn func(http.ResponseWriter, *http.Requ
 			return
 		}
 		id := r.PathValue("org")
+		if id == "-" && p.Key != nil {
+			id = p.Key.OrgID // an API key belongs to one organization, so "-" can stand for it
+		}
 		s.mu.Lock()
 		org := s.findOrg(id)
 		c := &orgCtx{User: p.User, Key: p.Key}