fix(auth): improve token expiry precision and org ID (#10)

<!-- mesa-description-start -->
## TL;DR

Fixes a bug in the token refresh logic that caused premature token
expiry and incorrect organization ID handling.

## Why we made these changes

The previous token refresh logic used imprecise, integer-based
timestamps for calculating token expiry. This could cause the CLI to
assume a token was expired when it was still valid, forcing unnecessary
logouts and disrupting user workflows. Additionally, the
`organization_id` was not correctly persisted during a refresh, which
could lead to context-related errors.

## What changed?

- Switched from seconds to milliseconds for token expiry calculations to
improve precision and prevent premature expiration.
- Ensured the `organization_id` is correctly requested and stored during
the token refresh flow.

<sup>_Description generated by Mesa. [Update
settings](https://app.mesa.dev/onkernel/settings/pull-requests)_</sup>
<!-- mesa-description-end -->

Author: masnwilliams

cmd/auth.go

@@ -121,7 +121,7 @@ func runAuth(cmd *cobra.Command, args []string) error {
 		logger.Debug("Time until expiry", logger.Args("time_until_expiry", timeUntilExpiry))
 		logger.Debug("Expires at", logger.Args("expires_at", tokens.ExpiresAt))
 		if timeUntilExpiry < 24*time.Hour {
-			pterm.Warning.Printf("⚠️ Access token expires in %s\n", timeUntilExpiry.Round(time.Minute))
+			pterm.Warning.Printf("⚠️ Access token expires in %s\n", timeUntilExpiry.Round(time.Second))
 		} else {
 			pterm.Success.Printf("✓ Access token valid for %s\n", timeUntilExpiry.Round(time.Second))
 		}

pkg/auth/oauth.go

@@ -271,6 +271,9 @@ func RefreshTokens(ctx context.Context, tokens *TokenStorage) (*TokenStorage, er
 	values.Set("refresh_token", tokens.RefreshToken)
 	values.Set("client_id", ClientID)
 	values.Set("scope", DefaultScope)
+	if tokens.OrgID != "" {
+		values.Set("org_id", tokens.OrgID)
+	}
 
 	// Make the token request manually to ensure client_id is included
 	req, err := http.NewRequestWithContext(ctx, "POST", TokenURL, strings.NewReader(values.Encode()))
@@ -316,6 +319,7 @@ func RefreshTokens(ctx context.Context, tokens *TokenStorage) (*TokenStorage, er
 		AccessToken:  newToken.AccessToken,
 		RefreshToken: newToken.RefreshToken,
 		ExpiresAt:    newToken.Expiry,
+		OrgID:        tokens.OrgID,
 	}, nil
 }