fix(app): scope Den org marketplace requests

[benjaminshafii]

Summary

• Send the selected organization id on Den org-scoped API calls so marketplace, skill, worker, and provider fetches do not depend on the server session's active-org timing.
• Sync current Den settings before refreshing marketplace/plugins in Settings, matching the other cloud extension refresh paths.

Evidence

Build verification

• pnpm install -- passed in the fresh worktree.
• pnpm --filter @openwork/app build -- passed.
• pnpm --filter @openwork/app typecheck -- failed on existing unrelated React-port typing errors before reaching a clean repo-wide typecheck gate. The changed files were included in the attempted typecheck; representative failures are in unrelated files such as src/app/mcp.ts, src/react-app/domains/connections/*, and messaging settings types.

API verification

• No server API contract changed. The app now sends the existing x-openwork-legacy-org-id header already consumed by Den API organization middleware.

UI verification

• Not run via Chrome MCP in this turn because the Den dev stack and signed-in seeded session were not booted. Build verification confirms the modified app bundle compiles.

Test instructions

1. pnpm dev:den
2. pnpm dev:den:seed-demo
3. Sign in as alex@acme.test / OpenWorkDemo123!
4. Open Settings -> Cloud / Den settings.
5. Verify Marketplaces & Plugins loads the demo marketplace for the selected organization and does not show No marketplaces are available yet. when the org has seeded marketplaces.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openwork-app	Ready	Preview, Comment	May 9, 2026 3:13am
openwork-den	Ready	Preview, Comment	May 9, 2026 3:13am
openwork-den-worker-proxy	Ready	Preview, Comment	May 9, 2026 3:13am
openwork-landing	Ready	Preview, Comment, Open in v0	May 9, 2026 3:13am
openwork-share	Ready	Preview, Comment	May 9, 2026 3:13am

[benjaminshafii]

Verification

• Installed dependencies in the fresh worktree with pnpm install successfully.
• Built the changed app package with pnpm --filter @openwork/app build successfully.
• Attempted pnpm --filter @openwork/app typecheck; it failed on existing unrelated repo-wide React-port typing errors, including src/app/mcp.ts, src/react-app/domains/connections/*, and messaging settings types.
• Did not run Chrome MCP UI verification because the Den dev stack and seeded signed-in session were not booted during this turn.

[benjaminshafii]

Follow-up Verification

The empty marketplace state persisted in dev because the browser dev stack also needs CORS to allow the org-scope header used by the app. Added X-OpenWork-Legacy-Org-Id to Den API allowed CORS headers.

Verified after the follow-up:

• pnpm --filter @openwork-ee/den-api build -- passed.
• pnpm --filter @openwork/app build -- passed.