agentguard.yaml: misleading comment says 'monitor' but mode is 'enforce'

[jpleva91]

Issue

The top comment in agentguard.yaml is contradicted by the actual mode setting:

# ShellForge — AgentGuard Governance Policy
# Mode: monitor (log but don't block) — switch to enforce when ready   ← says monitor

mode: enforce    ← actually enforce

This is misleading and may cause operators to believe governance is in observe-only mode when it is actually blocking actions. This likely contributed to masking the bounded-execution deny-all bug (see #58).

Fix

Update the comment to match reality:

# Mode: enforce (blocks denied actions) — set to 'monitor' to observe without blocking

[jpleva91]

Fixed by #83 — agentguard.yaml line 2 was updated to # Mode: enforce (block violations). Closing.