dsh-guardian-approval: Independent Model-Driven Automated Approval Plugin

The DSH Auto-Approval Plugin provides Codex Guardian–style safety protections for agents through an independent review model. Core features include an independent review channel and configuration, strict policies based on a risk × authorization matrix (accepting only explicit user instructions as authorization; file content is not treated as a basis for authorization), a tri-state circuit breaker to prevent abuse, sidecar audit logging, and a fail-closed mechanism. The plugin supports pre-reading outgoing file content for review and is compatible with multiple API styles, aiming to decouple review logic from the agent model and ensure the safety of agent operations.