Pending leads and onboarding
Intake leads are organization-scoped and require an authenticated session.