feat(control-plane): accept org/project names + close two API gaps

Control-plane commands now accept an org/project name wherever they previously required the parent's ULID: repo create --project, repo list, project create --owner (org owners), and grant org/project args. A ULID is detected by shape and passed through unchanged (no extra lookup); anything else is resolved by name, with clear errors on no-match or ambiguity.

Also surfaces two existing-but-unwired API operations:

• entire project list --org <name|ULID> (ListOrgProjects)
• entire grant project remove --provider/--provider-user-id (RevokeProjectAccessByProvider), alongside the existing --grantee-* form