fix: handle private labeling on login page without auth request (#2309)

* fix: handle private labeling on login page without auth request

* fix: respect requested org (primary domain scope) for private labeling again

internal/auth/repository/eventsourcing/eventstore/auth_request.go

@@ -521,6 +521,9 @@ func (repo *AuthRequestRepo) fillPolicies(ctx context.Context, request *domain.A
 			privateLabelingOrgID = request.UserOrgID
 		}
 	}
+	if request.RequestedOrgID != "" {
+		privateLabelingOrgID = request.RequestedOrgID
+	}
 	labelPolicy, err := repo.getLabelPolicy(ctx, privateLabelingOrgID)
 	if err != nil {
 		return err