dsh-airbag: A Non-Intrusive Safety Guardrail for DeepSeek Harness

`dsh-airbag` is a non-invasive security plugin developed specifically for DeepSeek Harness (DSH), designed to intercept API key leakage. Its core features include: detecting and blocking (or redacting) pasted sensitive keys on the client side; intercepting key writes within model tool calls; providing an initial workspace security health check; and managing approval fatigue via a notification center. The plugin follows a privacy-first policy, ensuring plaintext keys are not written to disk or logs, and allows developers to customize interception rules through a configuration file.