Add denied tag to newsletter subscriber record

Denied membership requests leave subscriber status unclear and community managers can't filter outreach. Add a DENIED tag to profiles so campaign managers exclude them from onboarding sequences same day.