Find forgotten ServiceNow delegations before approvals stall

**Objective:** List the delegations in effect on `{as-of-date}` (default today) and flag risky ones, including any longer than `{max-days}` days (default 30).

**Step 1: Pull the delegations**

Call `servicenow-get-delegate` with starts.to `{as-of-date}` and ends.from `{as-of-date}`. Then call it again with only starts.to `{as-of-date}` to catch delegations with no end date.

**Step 2: Check the people**

For every distinct user and delegate call `servicenow-get-user` with name set to them and note active.

**Step 3: Apply the rules**

Flag a delegation when:

* the delegate is inactive (approvals are going to nobody)
* the delegating user is inactive (the delegation should have been removed with the account)
* it has no end date
* it runs longer than `{max-days}` days
* it delegates approvals, and the delegate is also a delegator back to the same user (a loop)

**Step 4: Report**

A table: user, delegate, starts, ends, approvals, assignments, notifications, length in days, flags. Then a count per flag.

**Rules & Guidelines:**

* Read-only. Do not call `servicenow-add-delegate`, `servicenow-update-delegate`, `servicenow-update-user` or any other add- or update- tool.
* This tool set cannot identify a delegation record for editing, so recommend fixes for a ServiceNow administrator rather than proposing writes.

**Validation:**

* If no delegations are in effect, say so and stop.