CreateManagedOrganizationHandoffTokenAPI mints a one-time token that offers an OWNERLESS managed
org to a named successor manager, redeemable at POST /v1/managed-organization-adoptions. The owner-minted adoption flow can never run for such an org (it has no owner to consent), so without this it would be permanently pinned to whichever org created it. Consent stays sound: for an ownerless managed org the current manager is the org’s entire existing authority, so the handoff grants the successor nothing the minter did not already hold — the minter is RELINQUISHING access. The org service refuses the mint the moment the org has a real owner. Deliberately no MCP tool: durably re-homing an org stays off the model-facing tool surface, like manager-key minting and member adds (see the file header).

