dsh-tiered-approval: DeepSeek Harness's tiered automatic review plugin

`dsh-tiered-approval` is a tiered auto-approval plugin designed specifically for DeepSeek Harness (DSH), aiming to resolve the dilemma of low efficiency in "full confirmation" and high risk in "full delegation" during tool calling approvals. Adopting an MIT license, this plugin replaces simple binary approval with a three-tier decision mechanism: First, it utilizes a static rule safety net to directly intercept irreversible high-risk operations such as recursive deletion and formatting; Second, an LLM reviewer determines whether the calls align with user intent, outputting allow, reject, or requests for instructions; Finally, human fallback confirmation is provided for uncertain calls. The plugin supports configuration of `autoApproveAligned` to bypass pop-ups when intent is highly aligned, as well as `alignDeny` to allow specific high-risk operations to be downgraded to manual confirmation. Review intensity automatically adjusts according to DSH access patterns (e.g., read-only, workspace write).