feat: add HOL Guard tool

[kantorcodes]

Summary

Adds HOL Guard as a standalone Trunk tool backed by the stable hol-guard PyPI package.

• exposes the hol-guard shim through Trunk's default plugin source
• pins current stable known_good_version to 2.2.88
• adds a hol-guard --version semver health check
• adds the repository-native toolInstallTest

This follows the current tools/ contribution pattern for Python runtime packages. PyPI currently identifies 2.2.88 as the stable release and documents hol-guard --version as the installed command verification path.

Validation

• fresh upstream issue, PR, and code searches found no existing HOL Guard entry
• manifest/test structure mirrors existing Trunk Python tools and hyphenated tool naming
• branch is based directly on current upstream main

I could not run the full local trunk check in the connected execution environment, so I am not claiming that as passed; the repository-native install test is included for CI.

[trunk-io]

✨ Submitted to Merge by @kantorcodes. It will be added to the merge queue once all branch protection rules pass and there are no merge conflicts with the target branch. See more details here.

[kantorcodes]

/trunk merge