lonelymoon87/dsh-guardian

“Adds dangerous-operation policy checks, output redaction, and a security-review workflow.”