I made a couple of improvements to the IMC guardian:

• maybe most importantly, I filled in a lot of comments and inline documentation
• cleaned up the code quite a bit
• added GuardStateDecorators for handling fault conditions and lock loss
• cleaned up edges around the FAULT state
• broke out a BOOST state from the LOCKED state

The final point was to make it so that there is no activity in the LOCKED state, so that reaching the LOCKED state means that the IMC is fully up.  In general, I think we should start making all requestable states be "idle" states in that they don't do any action other than monitoring for exit conditions.  This idea here is to make them true markers of a steady state of the system.

We end up with just two requestable states now: DOWN and LOCKED.  The DOWN state doesn't actually prevent the IMC from locking briefly, so we may want to change the DOWN state to something that actually prevents the IMC from locking.

Next, I want to make the IMC guardian the manager of the SUS_MC{1,2,3}, so IMC is actually in control of setting the MC suspensions to their ALIGNED states.  This will also allow us to achive the point above, since we can then make the DOWN state into something where the SUS are misaligned, thereby preventing the IMC from locking.