dsh-html-escape: HTML Entity Encoding and Decoding

The DeepSeek Harness (DSH) plugin `dsh-html-escape` handles HTML entity encoding and decoding as well as preventing XSS attacks. This pure Node.js plugin provides two core functions, `html_escape` and `html_unescape`, which can escape or unescape characters such as `<`, `>`, and `&`. To install it, run `dsh plugin add` in a local terminal and configure `dsh.profile.bundles` in the profile's `package.json`. To use it, simply call the functions directly, for example, escape script tags to prevent XSS. Installing a plugin executes third-party code, so we recommend reviewing its source code yourself.