v0.1.0 — minimal verified dsh plugin template

Minimal, verified template for DeepSeek Harness plugins: bundle manifest, one tool, runtime peer guard, tests, and CI that really invokes the tool.

• Runtime guard rejects silently-linked older @deepseek-ai/dsh-tools copies (discussion #1697)
• Packaged integration: pack → fresh host install → register hello → real handler call → assert
• CI: typecheck/build/test + Windows dsh web boot smoke