Switches the calling customer's active organization to the given one.

The active organization determines the token's org claim; the change takes effect the next time the client refreshes its token. Responds with 403 when the caller is not a member of the target organization.