HOL GuardLocal-first runtime firewall for AI coding agents: intercepts shell, secrets, MCP and package-install tool calls before they execute. Apache-2.0.AI Security Privacy