EZGH Cloud organizations and IAM

Organizations, projects, users, invitations, groups, bots, policies and API keys (org-api). Authenticate with the session cookie, an API key (Authorization: Bearer ezgh_…) or an OAuth access token (Bearer ezgh_at_…).