docs: add fleet rollout details to Guardian enterprise deployment guide

[milanwilliams]

Summary

Enriches the Enterprise deployment guide section of the Guardian page (docs/guardian.mdx) with concrete fleet-rollout instructions, ported from semgrep/guardian-dev#53. This gives IT/security teams a copy-paste-ready path to standardize Guardian across a managed fleet.

Rather than adding a new competing heading, the content is folded into the existing MDM subsection (the built-in Claude Code / Cursor controls were already documented there), so there's one coherent section.

What's added

• The minimal Claude Code managed-settings payload (extraKnownMarketplaces + enabledPlugins)
• Two downloadable templates under docs/assets/guardian/, also inlined in <Accordion> blocks so the page is self-contained:
  • com.anthropic.claudecode.plist (Jamf)
  • semgrep-marketplace.mobileconfig (Iru)
• An MDM platform table (Iru, Jamf), rollout tips, and Iru/Jamf step-by-step instructions

Notes / things to verify before fleet use

• The managed-settings keys reflect Claude Code's plugin managed-settings format — worth a quick check against current Claude Code docs (flagged in the source PR too).
• Download links unverified: this Mintlify site has no existing precedent for serving non-image files (.plist/.mobileconfig). The full contents are inlined as accordions as a reliable fallback; please confirm the /assets/guardian/* links resolve on the deploy preview.
• The source calls it "Iru"; the guardian-dev PR description says "Iru (Kandji)". Kept "Iru" to match the source file.

🤖 Generated with Claude Code

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
semgrep-docs	🟢 Ready	View Preview	Jul 11, 2026, 12:47 AM

[khorne3]

Hey @milanwilliams! The content looks great; what do you think about splitting this so that everything in the Enterprise deployment guide is on its own page?

[khorne3]

@milanwilliams Here's the preview; let me know what you think!

[milanwilliams]

@katie.horne That looks great! The only part is that I got the instructions wrong - it points our internal semgrep-marketplace, instead of the official Claude one.

I just opened a new PR to fix all the files here on the readme: semgrep/guardian-dev#75 if you wouldn't mind updating your PR to use the new content, I would appreciate it.

[khorne3]

@milanwilliams Done! Is this ready to merge?

[milanwilliams]

Ah not quite - the provided .plist and .mobileconfig files also need to be updated to use the simplified configuration, the new files are on that same PR!

[khorne3]

@milanwilliams Updated!