Change a contact's HubSpot email preferences the right way

**Objective:** `{operation}` (subscribe or unsubscribe) `{contact-email}` for the subscription type `{subscription-name}`, with legal basis `{legal-basis}` when GDPR applies.

**Step 1: Resolve the subscription type**

Call `hubspot-get-subscriptions` with `name.contains` = `{subscription-name}` and `active` = true. If none or several match, list them (name, purpose, communication method) and stop. Keep its `subscription-type-id`.

**Step 2: Check the current status**

Call `hubspot-get-contact-subscriptions` with `recipient-email` = `{contact-email}`. Find the row whose `subscription-id` matches. Report its current `status`, `legal-basis` and `source-of-status`. If it is already in the requested state, say so and stop.

**Step 3: Confirm**

Show the email, subscription name and ID, current status, new status, and the legal basis and explanation that will be sent. For subscribe, warn that the contact must have agreed to receive these emails. Wait for an explicit yes.

**Step 4: Write**

* subscribe: `hubspot-subscribe-contact` once with `email`, `subscription-id`, and `legal-basis` / `legal-basis-explanation` when given
* unsubscribe: `hubspot-unsubscribe-contact` once with the same

**Step 5: Verify and report**

Call `hubspot-get-contact-subscriptions` again and report the new status.

**Rules & Guidelines:**

* Only the one tool in Step 4 may write, once, after Step 3.
* Do NOT call any other write tool: no other hubspot-add, hubspot-update, hubspot-rename, hubspot-remove, hubspot-subscribe, hubspot-unsubscribe or hubspot-import tool.
* Never resubscribe a contact whose current `source-of-status` shows they unsubscribed themselves unless the user confirms the contact asked for it.

**Validation:**

* If the write fails asking for a legal basis, tell the user GDPR is on for the portal and ask for `{legal-basis}`.
* If `{operation}` is not subscribe or unsubscribe, ask which and stop.