Skill/plugin request: official HOL Guard protected-agent workflow

I’d like to request an official HOL Guard agent artifact in TWG CLI’s maintained public skill/plugin surface.

Proposed scope:
- add a public TWG skill or supported plugin package that installs and invokes HOL Guard itself: https://github.com/hashgraph-online/hol-guard
- use a HOL Guard-supported local agent harness as the enforcement boundary before TWG workflows that can lead to mutating actions; deny, review, or Guard error should prevent the protected TWG action from being launched
- keep this to the maintained skill/plugin packaging and workflow surface rather than adding a new generic TWG interception API
- publish it through the same release or marketplace path TWG uses for public agent artifacts

The public repo docs identify GitHub Issues as the intake for skill/plugin requests, and `plugins/` documents Codex/Claude marketplace packaging. Would you prefer this to land as a public `skills/` artifact, a generated `plugins/` release artifact, or another maintained surface?

Once the landing surface is chosen, I can follow with the smallest implementation consistent with that release path.

Start with the packaging guidance in plugins/ and inspect existing public skill or plugin artifacts and their release or marketplace path. Confirm the maintained landing surface, then verify that the artifact installs and invokes HOL Guard before protected TWG workflows, with deny, review, or Guard error preventing the action from launching.

Written by the indexing model from the issue text.