Add integration guide, Go bindings example, or native wrapper for DeepSeek Harness sandbox plugin

### Description

DeepSeek Harness, an agentic developer framework, uses a "plugin-only" architecture—developers are building secure runtime wrappers to execute untrusted model-generated code, shell scripts, and build tasks.

runsc is uniquely suited for this role as an application kernel sandbox. runsc could be first-class execution sandbox backend / plugin for DeepSeek Harness

## use case

agentic code execution: AI coding agents frequently need to execute tests, compile software, or run code snippets autonomously.

Stronger Isolation than Standard Docker/runc: Standard container runtimes share the host kernel syscall surface. Using gVisor (runsc) as the underlying execution driver for an agent framework provides a multi-tenant application kernel layer, significantly lowering blast radius risks from agentic code execution loops.

Cordis Service Seam: dsh decouples its filesystem effects and process execution loop through a strict service interface. A runsc-backed plugin would intercept the tool execution pipeline to spawn sandboxed container processes safely.

### Is this feature related to a specific bug?

_No response_

### Do you have a specific solution in mind?

_No response_