dsh-poison-guard v0.2.0 — AST + deobfuscation poison scanner

AST analysis (NodeSecure JS-X-Ray) + deobfuscation decoder + regex heuristics. Catches obfuscated exfiltration, dynamic eval, hidden shell commands, and install-time scripts. See README for threat model and usage.