Add HOL Guard runtime safety skill

[kantorcodes]

Summary

• add a focused remotion-hol-guard Agent Skill to Remotion's maintained skills distribution
• install and invoke HOL Guard at the supported local coding-agent harness boundary before mutation-bearing Remotion work
• preserve Remotion's existing project/render guidance and explicitly avoid claiming HOL Guard runs inside Remotion cloud/server-side execution

This implements the direct-HOL proposal in #26. Accepted as-is, users installing remotion-dev/skills gain a maintained skill that invokes the real hol-guard runtime rather than a passive link or generic security primitive.

Scope

One new repository-native skill file: skills/remotion-hol-guard/SKILL.md.

The skill uses hol-guard detect --json, bootstrap, install, run --dry-run, run, and doctor to establish and verify the local harness boundary, and treats deny/review/error/timeout/unavailable states as stop conditions rather than falling back to an unprotected agent session.

No Remotion runtime or hosted-service interception is claimed.

Validation

• branch rebuilt on current upstream main
• single-file skill-only diff
• current upstream PR dedupe for HOL Guard / hol-guard is clean
• repository README confirms these maintained skills are installed via npx skills add remotion-dev/skills and are also offered by bun create video

Affiliation: I maintain HOL Guard / Hashgraph Online. AI assistance was used to prepare and verify this focused contribution.