78b0ce9650
Add checkOrgVisibility() guard to issue-statuses, issue-priorities, and issue-types endpoints. Public orgs remain accessible to everyone. Private/limited orgs return 404 for unauthenticated callers.