dsh-windows-workspace-guard: Windows Workspace and Credential Protection Plugin

`dsh-windows-workspace-guard` is a Windows agent-protection plugin developed specifically for DeepSeek Harness (DSH), designed to control dangerous file operations by agents. Independent of official components, it intercepts tool calls and provides three decision mechanisms—`PASS`, `ASK` (approval), and `HARD BLOCK` (interception)—to prevent file deletion, credential reading, or system-state corruption. It supports multiple tool calls and includes pre-check capabilities, audit logs, and summary statistics. Installation is straightforward, and users can configure `workspaceRoots` and `sensitivePaths` to isolate environments. The plugin does not send network requests; it is a conservative boundary-control tool suitable for use in Windows environments.