Check HOL Guard status

Perform read-only checks first. Do not repair, install, reconnect, or change policy unless the user separately asks for that action.

1. Confirm the CLI exists:

   command -v hol-guard
   

2. If present, report the installed version and current protection state:

   hol-guard --version
   hol-guard status
   

3. Summarize only what the CLI proves. Distinguish active local protection from optional Guard Cloud connectivity.