That doesn’t seem to be appropriate for a specific domain. Unless I’m reading it wrong.

We need to expose the Ghost blog on a specific subdomain of the domain we own ( blog.ourdomain.org )

doesn’t Tailscale Funnel assign a funky domain name rather than let you use your own?