Gasha - Defense-first Package Manager with cryptographic signing, sandboxing, and AI-powered auditing
