dsh-d1: Cloudflare D1 Toolkit

`dsh-d1` is a plugin for DeepSeek Harness (DSH) specifically designed to address the inability to connect directly to Cloudflare D1 databases. It interacts with D1 through the HTTP API and provides agents with a standalone set of tools. The plugin is read-only by default; write operations must be explicitly enabled and approved through an interactive approval process. It includes features such as probing, querying, schema inspection, statistics, and health checks. After installation, an account ID and a database list must be specified in the configuration file. For security, it isolates the API token via environment variables, combines a default read-only policy with an approval mechanism, and applies lexical guards to query statements to ensure secure operations.