dsh-permgate: Adding Fine-Grained Permission Control to DSH

dsh-permgate is an MIT-licensed open-source plugin designed for DeepSeek Harness (DSH), aimed at refining permission control for AI tool invocations from coarse-grained session-level authorization down to the tool-call level. The plugin supports independent review by categories such as directory access, command execution, file read/write, subagent startup, and repetitive operations. Its core features include global and project dual-level configuration, whitelist/blacklist exception management, shortcut tool default value settings, custom rules, approval pop-ups (with support for viewing diffs and command parameters), custom rejection reasons, underlying sandbox upgrade approval workflows, bilingual support in Chinese and English, and configuration persistence. Users can install it via the `dsh plugin` command and enable "custom review" in the permission selector. This plugin is suitable for scenarios that require clear boundaries for AI operations, and it is recommended to start from small