Rename 'guard' to 'ensure'

Apart from Shawn’s (dispositive) point about Ensure™, the word sounds more (to me) like a POSTcondition... which apparently B. Meyer also thought when designing Eiffel.

Now, wouldn’t it be nice to have co/contravariant assertions... oops, different thread. Not going there.