Zero-dep skill + host-only bundle

Key features

• Keys are never stored in this repo.
• dsh-media-skills — free vision & image generation for DSH (GLM-4V-Flash + Qwen3-VL + Gemini failover)
• The skill script reads env vars, then /.dsh/secrets/media-tools.env (same convention as dsh-media-skills).
• Task text is sent to the target CLI's provider — never put secrets or internal data into a task.
• Results belong to the target CLI's terms of service