example overlay; adapt to the profile's configuration format

• id: dsh-ops-kit config: roots: - /workspace/project - /workspace/memory maxFiles: 120 maxBytesPerFile: 160000

If no roots are configured, the tools default to the DSH process working directory. Credential-like paths and common run/secret directories are rejected or skipped.

## Design provenance

This package is a standalone integration layer distilled from general engineering practice, not a copy of any internal source repository. No credentials, raw private data, generated run outputs, or machine-specific configuration belong here.

## Verification

```bash
pnpm install --offline --ignore-scripts
pnpm build
pnpm typecheck
pnpm test

After installing into a live profile, verify that the DSH endpoint returns HTTP 200, the profile stays running after restart, the packaged skills are listed, and dsh_ops_capability_catalog returns all capability packs.

License

See CONTRIBUTING.md and SECURITY.md before contributing.

MIT.