Tag new Pipedrive customers in Drip so email treats them as customers

**Objective:** Tag in Drip, with `{tag}`, the contacts of organizations whose Pipedrive deals were won on or after `{won-since}` (default 30 days before today), so Drip can treat them as customers.

**Step 1: Won deals in Pipedrive**

Call `pipedrive-get-deal` with `status` set to `won` and `max-records` 200. The tool has no won-date filter, so keep only deals whose `won-date` is on or after `{won-since}` (30 days ago if empty). Collect the distinct `organization-name` values. List deals with no organization separately; they cannot be followed further.

**Step 2: Organizations to people**

For each organization name, call `pipedrive-get-organization` with `name` set to it. If more than one organization has that exact name, skip it and report the ambiguity. Then call `pipedrive-get-person` with `organization-id` set to the matched `organization-id`. Drop people with no email.

**Step 3: Check Drip**

For each email, call `drip-get-subscriber` with `email` set to it. Sort into:

* **To tag:** an `active` subscriber whose `tags` do not already include `{tag}`.
* **Already tagged.**
* **Unsubscribed or not in Drip:** never tag these. `drip-add-subscriber-tag` would create a missing person in Drip without recorded consent.

**Step 4: Confirm, then tag**

Show the deals found, then the To tag list (email, name, organization, deal title). Ask the user to confirm. After confirmation, call `drip-add-subscriber-tag` once per person with `email` and `tag` set to `{tag}`.

**Step 5: Report**

Per person: email, organization, outcome (tagged, already tagged, skipped and why, or error). Totals at the end.

**Rules & Guidelines:**

* `drip-*` tools are on the drip MCP server and `pipedrive-*` tools are on the pipedrive MCP server. If either set of tools is missing, stop and tell the user that both the drip and pipedrive servers must be connected.
* Match people across the two systems on email address only, compared case-insensitively with surrounding spaces trimmed. Never match on name alone.
* The only write tool this prompt may call is `drip-add-subscriber-tag`, and only after Step 4's confirmation.
* Do NOT call any other write tool. On Drip that means: `drip-add-subscriber`, `drip-update-subscriber`, `drip-unsubscribe-subscriber`, `drip-remove-subscriber-tag`, `drip-add-subscriber-to-campaign`, `drip-remove-subscriber-from-campaign`, `drip-remove-subscriber-from-all-campaigns`, `drip-start-subscriber-workflow`, `drip-remove-subscriber-from-workflow`, `drip-activate-campaign`, `drip-pause-campaign`, `drip-activate-workflow`, `drip-pause-workflow`. On Pipedrive that means: `pipedrive-add-person`, `pipedrive-update-person`, `pipedrive-add-organization`, `pipedrive-update-organization`, `pipedrive-add-deal`, `pipedrive-update-deal`, `pipedrive-add-lead`, `pipedrive-update-lead`, `pipedrive-add-activity`, `pipedrive-update-activity`, `pipedrive-add-note`, `pipedrive-update-note`.

**Validation:**

* If no deals were won since that date, say so and stop.
* If `{tag}` does not appear in `drip-get-tag`, warn that it will create a new tag in Drip, and include that in the confirmation.