dsh-plugin-auditor: Read-only pre-check for DSH plugin combinations

`dsh-plugin-auditor` is a read-only compatibility pre-check tool for DeepSeek Harness (DSH), designed to mitigate startup risks after adding new third-party plugins. This plugin scans files such as `package.json`, `cordis.patch.yml`, and `node_modules`, and outputs a risk report without executing the audited plugin code. Its core checks include duplicate tool registration, entry ID conflicts, peer dependency version mismatches, multiple memory plugins enabled simultaneously, and missing credentials like Token or App ID for channel plugins such as Telegram and Lark. Users can use `dsh plugin --profile [prof`