dsh-workspace-acl-allow: Preset Windows ACL Authorization for Explicitly Declared Workspace Directories

`dsh-workspace-acl-allow` is a Windows plugin designed for DeepSeek Harness (DSH) 0.1.7 and later. The new Low Integrity label in DSH requires higher privileges (WRITE_DAC and WRITE_OWNER), causing write operations to standard directories to be denied and triggering UAC prompts. This plugin resolves the issue by proactively granting full-control Windows ACL permissions for user-declared directories within the host process. It features a declarative design that activates only upon explicit user intent to avoid silent privilege escalation, and supports automatic or manual authorization, status monitoring, and built-in protections, significantly improving the convenience of using the dsh sandbox on Windows.