dsh-fs-deny-policyInstall▾0 ★@vladlearnsDeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never touchNewAuth