Vendor entire-org / entire-project / entire-grant plugins

Snapshot three sibling plugins from entiredb's main branch alongside the existing entire-repo vendor. All three follow the same kubectl- style plugin model and share the already-vendored cliauth / cliapi / core/api / client.* infrastructure — net new code is ~830 LOC of plugin source, no new module deps.

• cmd/entire-org/cli — create <name> and list. Hits entire-core only; no cluster URL required.
• cmd/entire-project/cli — create <name> and list [<org>]. Same model, entire-core only.
• cmd/entire-grant/cli — repo / project / org {add,remove,list} with --handle and --role. Same model.

Import paths rewritten in the standard pattern (entire.io/… → github.com/entireio/cli/internal/entiredb/…); no surgery needed beyond the import rewrite.