v0.4.0-alpha.3

DSH Gate v0.4.0-alpha.3

This prerelease adds the fail-closed live Provider smoke and cross-platform tests.

Use as a GitHub Action

- uses: ChaoYuZhang001/dsh-gate@v0.4.0-alpha.3
  with:
    target: ${{ github.event.pull_request.head.repo.html_url || github.event.repository.html_url }}
    ref: ${{ github.event.pull_request.head.sha || github.sha }}
    smoke: 'false'\n    github-token: ${{ github.token }}\n```\n\nThe Action reads the exact public PR head or pushed commit, writes a sanitized Receipt, and reports PASS, WARN, FAIL, or ERROR. It does not need a checkout, install plugins, run plugin lifecycle scripts, or mutate a DSH profile. Keep workflow permissions at `contents: read`.\n\n- [60-second plugin-author quickstart](https://github.com/ChaoYuZhang001/dsh-gate/blob/main/docs/plugin-author-quickstart.md)\n- [Bilingual alpha announcement](https://github.com/ChaoYuZhang001/dsh-gate/discussions/21)\n\n### Assets\n\n- `dsh-gate-0.4.0-alpha.3.tgz`\n- `SHA256SUMS`\n\n### Known boundary\n\nThe GitHub Pages diagnostic deployment is not a usable Desktop Provider yet. GitHub Pages returns the extensionless `/v1/plugins` response as `application/octet-stream`, while Desktop accepts only JSON media types. The Pages workflow fails closed on that check.\n\n- [Provider hosting task](https://github.com/ChaoYuZhang001/dsh-gate/issues/14)\n- [Independent plugin adoption task](https://github.com/ChaoYuZhang001/dsh-gate/issues/15)\n\nThis is a prerelease, not a security audit or an endorsement of any listed plugin.