The Pi's wifi chipset (all generations) is very low end and only supports one SSID. In fact, while the Pi4/Pi5 have a radio that has the physical capabilities to use 2.4G/5G, they do not support dual band operation (2.4G XOR 5G). Additionally, they use a 1x1 radio system which means that it doesn't perform very well with multiple client devices.
Because it only supports a single SSID (and a single radio band), you cannot create a guest SSID to run on the PI's radio in addition to your normal trusted network (lan) SSID.
That said, you can setup VLANs on the ethernet port, thus allowing the use of a VLAN-aware AP that supports multiple SSIDs. This is the preferred mode of operation for those using PI's as routers because of the fact that the Pi4/Pi5 are actually quite reasonable for use as wired routers, but have truly terrible built-in wifi. Almost any 802.11ac (wifi 5) AP/all-in-one wifi router will significantly outperform the Pi's built-in wifi, and you can get these cheap on both the new and used market (maybe even free if used).