[META] Add new guardrail type based on LLM

[ylwu-amzn]

Currently we have only one type of guardrail which check model input/output is toxic with stop words and regex. This is limited as it can only do exact match with stop words and regex. We plan to build a new type of guardrail which can use LLM to detect if input/output is toxic.