DSH Security Guard: Runtime Security Guard Plugin for DeepSeek Harness

This is a DeepSeek Harness (DSH) runtime security guard plugin maintained by ruanhaodong-tt. Through runtime method masking and HTTP request interception, it mitigates risks such as arbitrary code execution in configuration loaders and HTTP Host header spoofing without modifying source code, covering CVE QVD-2026-52631 and QVD-2026-57410. Core features include restricting Loader imports to prevent path traversal and validating the Host header to prevent loopback spoofing. Users must add the core loader and web server components to `cordis.patch.yml` and configure `trustedHosts` to allow specific access. Note that this plugin cannot fix VM.