DSH Network Plugin: Access DeepSeek Harness over LAN, Tailnet, or HTTPS Endpoints

By default, DeepSeek Harness (DSH) binds only to the local loopback address, limiting remote access. The DSH Network plugin sits in front of DSH as an authentication gateway, supporting LAN, Tailnet, and custom HTTPS connections. It allows one-time pairing to bind multiple routes and can be installed and enabled using the official command. The default gateway listens on port 3081; configuration parameters include the listen address, hostname, and iOS app download link. Note that DSH remains bound to the loopback address, and this plugin does not manage DNS, certificates, or firewall settings. Pairing tickets are one-time and intended only for short-term access.