DeepSeek Harness plugin: GitLab and GitHub API tokens stay out of the model context — encrypted at rest (AES-256-GCM), tools on demand, web settings panel.
dsh plugin --profile web add github:revive/dsh-git-credentials
View the source on GitHub