Enhance API key handling by distinguishing between user and organization subjects. Updated `RequestState` to correctly assign `user_id` and `org_id` based on the subject prefix. Added unit test to verify behavior for API keys with organization subjects.