dsh-skillnotary: Locking and Verifying AI Agent Skill Permissions

`dsh-skillnotary` is a security plugin for DeepSeek Harness (DSH) that locks and validates the permissions of AI agent skills, preventing them from silently gaining new capabilities. It ensures that skill versions remain consistent with approved content by generating lock files, signing capability declarations with Ed25519, and providing policy governance. The plugin supports automatic repair of `SKILL.md`, CI gate integration, and continuous monitoring. Its security model relies on file scanning rather than sandboxing; note that it depends on a Node.js environment and has specific compatibility requirements.