dsh-workflow-isolate: A QuickJS/WASM Isolated Workflow Engine for DeepSeek Harness

`dsh-workflow-isolate` is a plugin for DeepSeek Harness that provides a QuickJS/WASM isolation environment for workflow scripts, addressing the need for JavaScript capabilities without inheriting Node.js permissions. It enforces resource limits, blocks Node.js APIs, and preserves hooks, with the default engine switchable via `cordis.patch.yml`. When using it, ensure that scripts are portable and that its isolation boundaries and security risks are understood.