pub fn managed_guard_enabled() -> bool
Check if the orchestrator-managed env var is set (guard enabled).