dsh-web-fetch-enhanced: Whitelisting Non-Public Addresses for DeepSeek Harness Web Fetch

`dsh-web-fetch-enhanced` is a security-enhanced plugin for DeepSeek Harness, designed to address the issue that the native `web_fetch` rejects non-public addresses by default and therefore cannot access trusted intranet services. By default, the plugin rejects non-public targets and allows only explicitly matched CIDRs or domain allowlists. Core features include compatibility with the native tool, instant configuration through the web interface, a dual-layer allowlist mechanism (CIDRs + domains), DNS validation, per-hop redirect re-verification, and resource limit controls. Users can configure allowed network ranges and domains via the DSH Web interface. After installation, the Agent can securely read intranet documents or access private services, while the plugin strictly restricts the request scope, disallows Cookies, URL credentials, and excessive allowlisting, and automatically injects an authorization statement for the model.