Warn project teams when a client is behind on Intacct invoices

**Objective:** Check whether client `{customer-name}` has Intacct invoices more than `{days-overdue}` days overdue (default 60), and if so add a cost risk to each of their active Teamwork projects, after the user confirms.

**Step 1: Check the overdue balance in Intacct**

Call `intacct-get-customer` with `customer-name.contains` set to `{customer-name}`. If more than one matches, list them and stop. Call `intacct-get-invoice` with the `customer-id`, `total-due.min` = 0.01 and `due-date.to` set to today minus `{days-overdue}` days. If nothing comes back, say the client has nothing that overdue and stop. Otherwise total `total-due` and note the oldest `due-date`.

**Step 2: Find the client's active projects in Teamwork**

Call `teamwork-get-companies` with `name.contains` set to the Intacct `customer-name`. If none or several match, say so and stop. Call `teamwork-get-projects` with the `company-id` and `status` = active. If there are none, say so and stop.

**Step 3: Skip projects that already carry the risk**

For each project, call `teamwork-get-risks` with the `project-id` and `status` = open. If an open risk's `source` already mentions overdue invoices for this client, skip that project and say so.

**Step 4: Confirm**

Show the user the projects that will get a risk, and the risk text: source "Client has <total> in Intacct invoices more than <days> days overdue (oldest due <date>)", impacts cost true, and mitigation plan "Confirm a payment plan with the client before further billable work." Wait for an explicit yes.

**Step 5: Create and confirm**

After the user says yes, call `teamwork-create-risk` once per confirmed project with `project-id`, `source`, `mitigation-plan`, `impacts-cost` = true, `probability` = 3 and `impact` = 3 unless the user gives other values. Then call `teamwork-get-risks` for each project and confirm the new risk is there.

**Rules & Guidelines:**

* `intacct-get-customer` and `intacct-get-invoice` are on the intacct server. `teamwork-get-companies`, `teamwork-get-projects`, `teamwork-get-risks` and `teamwork-create-risk` are on the teamwork server.
* `teamwork-create-risk` is the only tool that may write, once per confirmed project.
* Do NOT call `teamwork-update-risk`, `teamwork-update-project`, `teamwork-create-message`, or any Intacct action tool such as `intacct-update-customer`.

**Validation:**

* Do not put invoice numbers or anything beyond the overdue total in the risk text, since project members may not have finance access.
* If a create call fails for one project, report it and carry on with the rest.