dsh-vault-wall: An Isolation Wall Plugin Preventing DSH Agent from Perceiving or Accessing Specified Sensitive Paths

`dsh-vault-wall` is a plugin running on the DSH host, designed to provide isolation and protection for sensitive paths. Through an interception layer, it supports three modes: hide (masquerading as non-existent), deny (returning an error directly), and ask (requiring manual approval). The plugin includes mechanisms such as tool risk assessment, post-execution validation (leak prevention), self-protection, and rule rollback. After installation, rules are configured via JSON, and the `/wall` command enables flexible boundary management to effectively prevent the leakage of sensitive data.