DSH agent-fleet hygiene audit plugin

Key features

• Check three things. Output is dissensitized.
• Read-onlyno document, no process, no access to the network, no state of storage
• Scan text class profiles only (no decryption of encrypted storage, system key string, binary files)
• De-sensitizationall suspected evidence is coded.
• The test also asserts that "output JSON does not contain original keys"