Security Guard agent is the long pole for CI now. It should not block merging PRs, but rather advise on them post-hoc