fix: Add org fields to SessionAuthObjectV2 for v2 token support

SessionAuthObjectV2 was missing org_id, org_slug, org_role, and
org_permissions fields, causing organization data to be lost when
converting v2 session tokens via to_auth().

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>