feat(hol.org): add HOL Guard

[kantorcodes]

Summary

• What changed: adds HOL Guard at projects/hol.org/package.yml using the PyPI source distribution and pantry's bkpyvenv packaging pattern.
• Why: makes the hol-guard CLI available through pkgx.

AI Intent

• Prompt or task statement: package HOL Guard for pkgx.
• Scope of AI-assisted changes: manifest preparation and repository-policy checks. I reviewed the package source, install path, and resulting diff.

Risk Assessment

• Risk level: low
• Primary risks: Python dependency wheel availability and platform compatibility.
• Compatibility impact: new package only.

Rollback Plan

• Revert path: revert this package manifest.
• Forward-fix path: adjust platform or Python dependency constraints if provider CI finds a compatibility issue.

Validation

• Local checks run: reviewed the manifest against current pantry Python CLI package patterns and the HOL Guard package metadata. This environment does not have a local pkgx/brewkit runtime.
• CI checks expected: package build plus hol-guard --version and hol-guard --help.

Internal/Public Boundary Check

• No internal-only data, private URLs, secrets, or private runbooks were added.