Add optional Shipgate scan for guardrails quickstart

[pengfei-threemoonslab]

Problem

The Guardrails quickstart uses SerperDevTool() for external web search, but there is no lightweight release-readiness recipe for reviewing that tool surface without running the notebook.

Why static/local-first

This adds an optional scoped Agents Shipgate manifest plus a local tool inventory for the notebook. Agents Shipgate reads local metadata only; it does not run the notebook, call Serper, make LLM calls, execute agents, or upload source.

Command run

PYTHONPATH=/Users/pengfeihu/code/shipgate/src python -m agents_shipgate scan -c Guardrails/shipgate.yaml --ci-mode advisory --format json

For maintainers using the published package, the README shows:

pipx install agents-shipgate
agents-shipgate scan -c Guardrails/shipgate.yaml --ci-mode advisory

Result summary

• Exit code: 0
• Status: no_release_blockers_detected
• Critical: 0
• High: 0
• Medium: 0
• Human review: not required

Maintainer-safe note

This is docs/sample-manifest only. It does not add repo-wide CI and does not commit generated agents-shipgate-reports/ output.