Verify unconfirmed sponsor orgs in ALLOWED_ORGS

[rfay]

Background

When CODER_OAUTH2_GITHUB_ALLOWED_ORGS was populated in May 2026 (PR #131), most sponsor orgs were confirmed against the DDEV Open Collective and GitHub sponsor data. A few could not be verified with confidence and were flagged in docs/admin/server-setup.md.

Orgs to verify

• Institute-for-Advanced-Studies — flagged ⚠️ unverified. Could not confirm this is a current $100+/month DDEV sponsor org. Check against current Open Collective data.

More broadly: the full ALLOWED_ORGS list should be reviewed periodically as sponsorships change. A sponsor that drops below $100/month should be removed; new qualifying sponsors should be added.

Action items

• Confirm Institute-for-Advanced-Studies is (or is not) a current $100+/month sponsor — if not, remove from ALLOWED_ORGS and from docs/admin/server-setup.md
• Establish a process for keeping ALLOWED_ORGS in sync as sponsorships change (e.g., quarterly review, or hook into Open Collective webhook)

Reference

docs/admin/server-setup.md — "Sponsor org access" section contains the full list with verification status column.