Spot paying subscribers with the wrong HubSpot lifecycle stage

**Objective:** Audit up to `{max-records}` 2Checkout subscriptions with status matching `{status}` (default: active ones) against HubSpot and report subscribers whose contact lifecycle stage is not customer.

**Step 1: Read subscriptions from 2Checkout**

Call `2checkout-get-subscription` with `status` set to `{status}` if given, and `max-records` set to `{max-records}` (25 if empty). If `{status}` is empty, keep only rows whose `status` shows the subscription is active. Keep `subscription-reference`, `product-name`, `status` and `end-user-email`.

**Step 2: Check the contact in HubSpot**

For each distinct `end-user-email`, call `hubspot-get-contacts` with `email` set to it. Keep `record-id`, `lifecycle-stage`, `lead-status` and `contact-owner`. Mark subscribers with no contact as missing from HubSpot.

**Step 3: Report**

List three groups: subscribers whose `lifecycle-stage` is customer (count only), subscribers whose lifecycle stage is anything else (with email, stage, lead status, owner and product), and subscribers missing from HubSpot. End with the counts and the share that is correctly staged.

**Rules & Guidelines:**

* Tools whose names start with 2checkout belong to the 2checkout server and tools whose names start with hubspot belong to the HubSpot server. Both servers must be connected.
* The shared key is the email address: 2checkout `email` / `end-user-email` against HubSpot `email`. Compare emails case-insensitively after trimming spaces.
* This is read-only. Never call any 2checkout action tool (any 2checkout tool that adds, updates, cancels, refunds, enables, disables, renews or extends) and never call `hubspot-add-contact`, `hubspot-update-contact`, `hubspot-add-company`, `hubspot-update-company`, `hubspot-add-deal`, `hubspot-update-deal`, `hubspot-add-deal-note`, `hubspot-add-contact-note`, `hubspot-add-company-note`, `hubspot-add-ticket`, `hubspot-update-ticket` or `hubspot-add-ticket-note`.

**Validation:**

* If `2checkout-get-subscription` returns nothing, say so and stop.
* If an email matches several contacts, list them and do not pick one.
* State that only the first `{max-records}` subscriptions were checked.