fix(auth): settle the membership before the first session resolves its active organization, so its audit rows carry a tenant

fix(auth): settle the membership before the first session resolves its active organization, so its audit rows carry a tenant #2467