Tag Drip subscribers by their DonorPerfect giving

**Objective:** Apply the Drip tag `{tag}` to every Drip subscriber who is a DonorPerfect donor with a gift total of at least `{gift-total-min}`. Check at most `{max-donors}` donors (default 100).

**Step 1: List qualifying donors in DonorPerfect**

Call `donorperfect-get-donor` with `gift-total.min` set to `{gift-total-min}` and `max-records` set to the limit. Drop donors with a blank email.

**Step 2: Match them in Drip**

For each donor, call `drip-get-subscriber` with `email` set to the donor's email. Sort the donors into three groups: already tagged (`{tag}` is in their Drip tags), to tag (in Drip and not tagged), and not in Drip.

**Step 3: Confirm**

Show the three groups with name, email and gift total, and ask the user to confirm before tagging. Do not continue without an explicit yes.

**Step 4: Tag**

For each subscriber in the to-tag group, call `drip-add-subscriber-tag` with `email` set to their email and `tag` set to `{tag}`. Then call `drip-get-subscriber` for each one again to confirm the tag is present.

**Step 5: Report**

Counts for tagged, already tagged, not in Drip and failed, with the reason for each failure.

**Rules & Guidelines:**

* `donorperfect-get-donor` is on the donorperfect server. `drip-get-subscriber` and `drip-add-subscriber-tag` are on the drip server.
* The only write this prompt may make is `drip-add-subscriber-tag`, on the drip server, after confirmation in Step 3.
* Do not create subscribers for donors missing from Drip: never call `drip-add-subscriber` here. Do not call `drip-remove-subscriber-tag` or any DonorPerfect save tool.
* Skip subscribers whose Drip status is unsubscribed, and list them as skipped.

**Validation:**

* If no donor meets the threshold, say so and stop.
* If `{tag}` is not an existing tag, check with `drip-get-tag` and tell the user that tagging will create it, as part of the Step 3 confirmation.