Address Sourcery review: clarify org vs user package paths

- Explain how <owner>/<repo> maps to the GHCR image name in README
- Add separate instructions for org-owned vs personal repos (UI URLs
  and CLI endpoints differ)
- Update migration script to auto-detect org vs user and use the
  correct API endpoint
- Mention `pixi run dev-use-prebuilt` in the README instructions

Author: blooop

README.md

@@ -63,7 +63,15 @@ By default, the devcontainer builds locally from `.devcontainer/Dockerfile`. Thi
 
 ## Switching to a prebuilt image (optional)
 
-A CI workflow (`.github/workflows/devcontainer.yml`) automatically builds and pushes a devcontainer image to GHCR whenever `.devcontainer/` files change on `main`. To use it for faster startup:
+A CI workflow (`.github/workflows/devcontainer.yml`) automatically builds and pushes a devcontainer image to GHCR whenever `.devcontainer/` files change on `main`. The image is published as `ghcr.io/<owner>/<repo>/devcontainer:latest`, where `<owner>` is your GitHub username or organization and `<repo>` is the repository name (e.g. `ghcr.io/myuser/myproject/devcontainer:latest`).
+
+You can migrate automatically with:
+
+```bash
+pixi run dev-use-prebuilt
+```
+
+Or manually:
 
 1. Edit `.devcontainer/devcontainer.json`: comment out the `"build"` and `"features"` blocks, uncomment the `"image"` line
 2. Update the image reference to match your repo: `ghcr.io/<owner>/<repo>/devcontainer:latest`
@@ -75,7 +83,8 @@ A CI workflow (`.github/workflows/devcontainer.yml`) automatically builds and pu
 **Option 1: GitHub Web UI**
 
 1. Go to your repository's package settings:
-   `https://github.com/users/<username>/packages/container/<repo>%2Fdevcontainer/settings`
+   - Personal repos: `https://github.com/users/<username>/packages/container/<repo>%2Fdevcontainer/settings`
+   - Organization repos: `https://github.com/orgs/<org>/packages/container/<repo>%2Fdevcontainer/settings`
 2. Under "Danger Zone", click **Change visibility**
 3. Select **Public** and confirm
 
@@ -85,8 +94,11 @@ A CI workflow (`.github/workflows/devcontainer.yml`) automatically builds and pu
 # Ensure your token has the write:packages scope
 gh auth refresh -s write:packages
 
-# Set the package to public
+# For personal repos:
 gh api --method PATCH /user/packages/container/<repo>%2Fdevcontainer -f visibility=public
+
+# For organization repos:
+gh api --method PATCH /orgs/<org>/packages/container/<repo>%2Fdevcontainer -f visibility=public
 ```
 
 # Github setup

scripts/devcontainer_use_prebuilt.sh

@@ -64,20 +64,35 @@ echo "Updated $DEVCONTAINER_JSON to use prebuilt image."
 echo ""
 echo "Attempting to make GHCR package public..."
 
+OWNER=$(echo "$REPO" | cut -d'/' -f1)
 PACKAGE_NAME=$(echo "$REPO" | cut -d'/' -f2)
 ENCODED_PACKAGE="${PACKAGE_NAME}%2Fdevcontainer"
 
-if gh api --method PATCH "/user/packages/container/${ENCODED_PACKAGE}" -f visibility=public >/dev/null 2>&1; then
+# Determine if owner is an org or a user
+IS_ORG=false
+if gh api "/orgs/${OWNER}" >/dev/null 2>&1; then
+    IS_ORG=true
+fi
+
+if $IS_ORG; then
+    API_PATH="/orgs/${OWNER}/packages/container/${ENCODED_PACKAGE}"
+    SETTINGS_URL="https://github.com/orgs/${OWNER}/packages/container/${ENCODED_PACKAGE}/settings"
+else
+    API_PATH="/user/packages/container/${ENCODED_PACKAGE}"
+    SETTINGS_URL="https://github.com/users/${OWNER}/packages/container/${ENCODED_PACKAGE}/settings"
+fi
+
+if gh api --method PATCH "$API_PATH" -f visibility=public >/dev/null 2>&1; then
     echo "GHCR package is now public."
 else
     echo "Could not set package visibility automatically."
     echo ""
     echo "To make the package public manually, either:"
     echo ""
-    echo "  1. Visit: https://github.com/users/$(echo "$REPO" | cut -d'/' -f1)/packages/container/${ENCODED_PACKAGE}/settings"
+    echo "  1. Visit: $SETTINGS_URL"
     echo "     -> Danger Zone -> Change visibility -> Public"
     echo ""
     echo "  2. Run:"
     echo "     gh auth refresh -s write:packages"
-    echo "     gh api --method PATCH /user/packages/container/${ENCODED_PACKAGE} -f visibility=public"
+    echo "     gh api --method PATCH $API_PATH -f visibility=public"
 fi