dsh-auth-gateway: Providing Authentication Gateway and Login Auditing for dsh Web

dsh-auth-gateway is an MIT-licensed Cordis gateway plugin maintained by xbzbing, designed to provide secure access control for DeepSeek Harness (dsh web). This plugin intercepts unauthenticated HTTP and WebSocket requests at the gateway layer, with core features including password authentication, TOTP two-factor authentication, session management, and comprehensive auditing. It manages sessions through in-memory tokens and HttpOnly Cookies, and implements password failure lockout, global and OTP-independent rate limiting to prevent brute-force attacks. Audit logs record login, logout, and password change events, persisted for 90 days without storing credentials. Installation requires Node >= 20, added via the `dsh plugin` command, and generates a one-time initial password on first startup.