dsh-profile-lock-proof: Provides content-addressed consistency proof for DSH profile dependencies

`dsh-profile-lock-proof` is a plugin for DSH that generates machine-readable proofs to verify consistency between profile dependency declarations, pnpm lock importers, installed package manifests, and `dsh.bundle.patch`. It does not install packages, connect to the network, modify the profile, or return sensitive content; it only verifies consistency boundaries. The plugin requires Node.js >=22, is MIT licensed, and is currently at version 0.2.0. Its input adopts a fail-closed strategy, accepting only regular files within the workspace; out-of-bounds paths, symbolic links, or content hash mismatches will all result in failure. The output includes information such as identity, classification, hash, and status, and is atomically written to a specified directory. Provides a CLI command.