chore: remove the HOL Guard badge and the HOL plugin scan workflow

The badge showed a stale version and a grey "partial scan" caused by the
registry's own scanner timing out, and it only fed an engagement bonus on
HOL's listing. The scan workflow existed for that listing's score. Both
go. The changes that stand on their own stay: the lockfile, the privacy
and terms pages, the Codex manifest, live-session's LICENSE and
SECURITY.md, and the eval-free engine-id check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: TMHSDigital

.github/workflows/plugin-scan.yml

@@ -206,7 +206,7 @@ jobs:
           import json
           # live-session/ is the opt-in blender-live-session plugin (#483).
           # .codex-plugin/ is the Codex manifest, which carries the site,
-          # privacy and terms URLs that HOL's registry scan asks for (#511).
+          # privacy and terms URLs that plugin directories ask for (#511).
           for path in ('.claude-plugin/plugin.json', '.claude-plugin/marketplace.json',
                        '.codex-plugin/plugin.json',
                        'live-session/.claude-plugin/plugin.json',

.github/workflows/release.yml

@@ -22,7 +22,6 @@
   <a href="https://github.com/TMHSDigital/Blender-Developer-Tools/actions/workflows/validate.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Blender-Developer-Tools/validate.yml?branch=main&style=flat-square&label=validate" alt="Validate" /></a>
   <a href="#license"><img src="https://img.shields.io/badge/license-CC%20BY--NC--ND%204.0%20%2B%20MIT%20code-384d54?style=flat-square" alt="License: CC BY-NC-ND 4.0, with snippets and templates under MIT" /></a>
   <a href="https://github.com/sponsors/TMHSDigital"><img src="https://img.shields.io/badge/sponsor-%E2%99%A5-ea4aaa?style=flat-square&logo=githubsponsors&logoColor=white" alt="Sponsor TMHSDigital on GitHub Sponsors" /></a>
-  <a href="https://hol.org/registry/plugins/tmhsdigital%2Fblender-developer-tools"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fhol.org%2Fapi%2Fregistry%2Fbadges%2Fplugin%3Fslug%3Dtmhsdigital%252Fblender-developer-tools%26metric%3Drelease&style=flat-square" alt="HOL Guard" /></a>
 </p>
 
 <p align="center">

README.md

@@ -128,7 +128,7 @@ def _value(node, version):
     flags, comparisons, and/or/not, and conditional expressions. Anything
     else raises ValueError, which the caller reports as "not resolvable".
     The repo's own code is walked, never executed, so the check needs no
-    eval/exec (HOL's plugin scanner rejects dynamic execution, #510).
+    eval/exec, so a check cannot run arbitrary code from the tree.
     """
     if isinstance(node, ast.Constant):
         return node.value

tests/check_engine_id.py

@@ -23,7 +23,7 @@
 - .codex-plugin/plugin.json: same name, description, version, homepage,
   license and keywords as the others; its interface websiteURL, privacyPolicyURL
   and termsOfServiceURL are the site, its privacy/ and its terms/ pages, and
-  build_site.py renders both pages (HOL's registry scan reads them, #511); its
+  build_site.py renders both pages (plugin directories read them, #511); its
   skills path and icon files exist
 
 Run: python tests/check_manifest_meta.py      (exit 0 ok, 1 on mismatch)