dsh-plugin-tool-guard: DeepSeek Harness Tool Calling Security Guard Plugin

The DeepSeek Harness plugin `dsh-plugin-tool-guard` is designed to intercept dangerous AI operations through a runtime security guard layer and protect system safety. It does not modify business code, and supports dangerous command blacklists, sensitive file blacklists, path whitelists, and write protection. It provides three security levels—lenient, standard, and strict—and includes human approval and audit log functionality. The installation command is `dsh plugin --profile web add dsh-plugin-tool-guard`. It supports unified configuration through administrative tools or a GUI panel, ensuring that the AI operates only within safe boundaries.