Fix workspace-setup redirect loop after org creation

The JWT callback was optimized to only query the DB on sign-in or
explicit session update, but the middleware reads the JWT cookie which
was stale after org changes. Reverted to always refreshing org data in
the JWT callback (matching original behavior). Also switched workspace-
setup and onboarding completion to hard navigation to guarantee the
middleware re-evaluates with the latest JWT cookie.

Made-with: Cursor

src/app/(dashboard)/onboarding/page.tsx

@@ -126,8 +126,7 @@ export default function OnboardingPage() {
         }
 
         if (result.complete) {
-          await fetch("/api/auth/session");
-          router.replace("/");
+          window.location.href = "/";
           return result;
         }