dsh-ocsf-forwarder: OCSF 1.9.0 Session Activity Forwarder for DeepSeek Harness

The `dsh-ocsf-forwarder` plugin standardizes DeepSeek Harness (DSH) event streams into OCSF 1.9.0 format for Security Operations Center (SOC) use. It handles session lifecycle, tool call classification, and approval decisions, while supporting privacy protection and data integrity chain validation. The plugin must run with a specific version of the DSH agent and can be configured via YAML to send logs to receivers such as Splunk or OTLP. This tool is primarily intended for auditing and data analytics, but it is not a security containment boundary and does not provide detection or alerting capabilities.