DeepSeek Harness Plugin: dsh-full-with-approval

The DeepSeek Harness (DSH) plugin `dsh-full-with-approval` introduces a hybrid “full compute access + write approval” mode, filling a gap for scenarios that require GPU inference while strictly restricting file writes. The plugin activates the `full-with-approval` preset through the mount layer, retaining `danger-full-access` (including support for CUDA, networking, etc.) while adding an interactive approval mechanism for shell command execution and writes to files outside the workspace or to protected files, helping prevent accidental modification of sensitive files. After installation, users can activate it via the command line or Web UI and adjust protected paths and rules through configuration files. The plugin uses a non-invasive design, but its shell-checking heuristic mechanism may be subject to potential bypasses.