AdoptManagedOrganizationAPI brings an EXISTING org under the caller's manager org by redeeming a
one-time consent token. Two kinds redeem here: an ADOPTION token, minted by the target org’s owner on the session surface (the manager credential alone can never adopt an arbitrary org — it must present a secret only the owner could have created), and a HANDOFF token, minted by the org’s current manager for an ownerless managed org and pinned to the redeeming successor (the redeem then swaps the management edge atomically). Deliberately no MCP tool: durably re-homing an org under a manager stays off the model-facing tool surface for the same reason manager-key minting and member adds do (see the file header). The path is a sibling of /v1/managed-organizations because Encore rejects a static segment (`adopt`) alongside the parameterized `/:orgSlug/members` route.

