fix(snapshots): Add --project flag for org token compatibility

The latest-base endpoint requires a project query param when using org
auth tokens, since they lack user project membership. Forward the
existing --project arg to the API call so org tokens work in CI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: NicoHinderling

src/api/mod.rs

@@ -1042,6 +1042,7 @@ impl AuthenticatedApi<'_> {
         org: &str,
         app_id: &str,
         branch: Option<&str>,
+        project: Option<&str>,
     ) -> ApiResult<Option<LatestBaseSnapshotResponse>> {
         let mut path = format!(
             "/organizations/{}/preprodartifacts/snapshots/latest-base/?app_id={}",
@@ -1051,6 +1052,9 @@ impl AuthenticatedApi<'_> {
         if let Some(branch) = branch {
             path.push_str(&format!("&branch={}", QueryArg(branch)));
         }
+        if let Some(project) = project {
+            path.push_str(&format!("&project={}", QueryArg(project)));
+        }
         let resp = self.get(&path)?;
         if resp.status() == 404 {
             Ok(None)

src/commands/snapshots/download.rs

@@ -19,9 +19,12 @@ pub fn make_command(command: Command) -> Command {
         .about("[EXPERIMENTAL] Download baseline snapshot images from Sentry.")
         .long_about(format!(
             "Download baseline snapshot images from Sentry's preprod system to a local directory.\n\n\
+            Use --snapshot-id to download a specific snapshot, or --app-id to resolve the latest \
+            baseline (org auth tokens require --project with a numeric project ID for --app-id).\n\n\
             {EXPERIMENTAL_WARNING}"
         ))
         .org_arg()
+        .project_arg(false)
         .arg(
             Arg::new("app_id")
                 .long("app-id")
@@ -60,6 +63,7 @@ pub fn execute(matches: &ArgMatches) -> Result<()> {
     let api_ref = Api::current();
     let api = api_ref.authenticated()?;
 
+    let project = matches.get_one::<String>("project").map(|s| s.as_str());
     let app_id = matches.get_one::<String>("app_id");
     let snapshot_id_arg = matches.get_one::<String>("snapshot_id");
     let branch = matches.get_one::<String>("branch").map(|s| s.as_str());
@@ -72,7 +76,7 @@ pub fn execute(matches: &ArgMatches) -> Result<()> {
     let snapshot_id = match (app_id, snapshot_id_arg) {
         (Some(app_id), None) => {
             eprintln!("Resolving latest baseline snapshot for app '{app_id}'...");
-            match api.get_latest_base_snapshot(&org, app_id, branch)? {
+            match api.get_latest_base_snapshot(&org, app_id, branch, project)? {
                 Some(resp) => {
                     eprintln!(
                         "Found snapshot {} ({} images)",