Add documentation for multi-language plugins, security model, and developer setup
Updated documentation to match the switch to provider supplied SDKs, streaming, and the new environment variables (ASH_ALWAYS_OPENAI_API, ASH_ATTACHMENT_MAX_BYTES, ASH_STREAM)
docs: explain managed tool list substitutions
Document dotfile-blocking defense layer, tool-repeat detection, execution summary logging, and Python execution feature
Add Debugging-with-ASH_VERBOSE page and cross-link from Home and Security pages
Update broker weakness note: brokerURLAllowed now pins to AI_ENDPOINT host
Add Security Model and Environment Variables wiki page