Find BugHerd bugs that never reached Azure DevOps

**Objective:** Find BugHerd tasks in project `{project-id}` that are not linked to an Azure DevOps work item, and suggest a likely match for each. Limit to `{max-tasks}` tasks (default 25).

**Step 1: Read the BugHerd tasks (BugHerd server)**

Call `bugherd-get-tasks` with project-id `{project-id}` and max-records `{max-tasks}`. Keep tasks whose external-id is empty and whose status is not closed.

**Step 2: Search Azure DevOps (Azure DevOps server)**

For each kept task, call `azure-devops-get-work-item` with title.contains set to the most distinctive words of the task title (a few words, not the whole sentence). Add work-item-type "Bug" if the search is too broad. Keep at most 3 candidates per task with id, title, state and assigned-to.

**Step 3: Report**

For each task: task-id, task-number, title, severity, and either the candidate work items or "no candidate found". Mark a candidate as "likely" only when the titles clearly describe the same issue.

**Rules & Guidelines:**

* `bugherd-get-tasks` is on the BugHerd server; `azure-devops-get-work-item` is on the Azure DevOps server.
* Read only. Do not call `bugherd-update-task` to store the link, and do not call `bugherd-add-comment`.

**Validation:**

* If every task already has an external-id, report that and stop.
* A candidate is a suggestion only; never state it as confirmed.