X_STORAGE_ORG_MISMATCH
Means
object key belongs to another org
Typical cause
a key from one tenant used while the actor resolves to another; the signature can be perfectly valid and this still fires
Fix
build it with scopedKey('<orgId>', ...parts), and pass the actor's org as orgId — never one read off the request