feat: added suborg login property for machine identities

[akhilmhdh]

Description 📣

This PR adds support for sub-org login for the machine identity both in login command and gateway command. This allows accessing resources inside a sub-organization.

Type ✨

• Bug fix
• New feature
• Improvement
• Breaking change
• Documentation

Tests 🛠️

• Login without organization slug
• Login with --organization-slug flag

---

• I have read the contributing guide, agreed and acknowledged the code of conduct. 📝

[greptile-apps]

Greptile Overview

Greptile Summary

This PR adds support for sub-organization login scoping for machine identities in both the login and gateway start commands.

Key Changes

• Added --organization-slug flag to the login command and gateway start command
• Updated all machine identity authentication methods (HandleUniversalAuthLogin, HandleJwtAuthLogin, HandleKubernetesAuthLogin, HandleAzureAuthLogin, HandleGcpIdTokenAuthLogin, HandleGcpIamAuthLogin, HandleAwsIamAuthLogin, HandleOidcAuthLogin, HandleLdapAuthLogin) to retrieve and pass the organization slug to the SDK via .WithOrganizationSlug()
• Upgraded github.com/infisical/go-sdk from v0.6.1 to v0.6.8 to support the new functionality
• Used consistent pattern across all auth methods: retrieve slug with GetCmdFlagOrEnvWithDefaultValue (defaults to empty string), then chain .WithOrganizationSlug(organizationSlug) before the auth call

Documentation Gap

No documentation exists in the /docs folder for this feature. Consider documenting how customers can discover and use the --organization-slug flag for sub-organization access.

Confidence Score: 5/5

• This PR is safe to merge with no critical issues found
• The implementation follows a consistent pattern across all authentication methods, properly retrieves the organization slug with appropriate error handling, and uses a safe default value (empty string) when not provided. The SDK upgrade appears to be the enabler for this feature. No security vulnerabilities or breaking changes detected.
• No files require special attention

Important Files Changed

Filename	Overview
go.mod	Updated go-sdk from v0.6.1 to v0.6.8, moved memguard from indirect to direct dependency
packages/util/auth.go	Added organization-slug support to all machine identity auth methods using WithOrganizationSlug() pattern
packages/cmd/login.go	Added organization-slug flag to login command for machine identity logins
packages/cmd/gateway.go	Added organization-slug flag to gateway start command for sub-organization scoping

[varonix0]

q: why not allow using the same environment variable that we support in the go SDK for the org slug?