Proposal: PaySafe action provider (x402 payment-security firewall)

AgentKit agents that pay over x402 have no built-in guard against the failure modes that drain agent wallets — prompt-injection-triggered payments, replayed nonces, overpayment, secrets leaking in payment metadata, lookalike-token contracts, address poisoning. PaySafe (https://paysafe-agent.com) is a non-custodial firewall that returns an allow/flag/block verdict for a payment before it settles.

I maintain `agentkit-paysafe` (published, tested) and would like to contribute it in-tree as an action provider (`action_providers/paysafe/`) — three actions: `paysafe_scan_payment`, `paysafe_check_reputation`, `paysafe_report_counterparty`. It's already built against `ActionProvider` / `@create_action` and is network-agnostic (advisory metadata analysis; never touches the wallet).

Before I open the PR: are you open to a third-party service integration in-tree, or would you prefer it stay an external package? Happy to follow whatever pattern you point me to.