chore(sdlc): configure dependabot, codeowners, and templates

Author: Aitomates

.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,60 @@
+name: Bug report
+description: Report a reproducible defect
+title: "[Bug]: "
+labels:
+  - bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not disclose vulnerabilities or credentials here. Use the security policy.
+  - type: input
+    id: version
+    attributes:
+      label: Version or commit
+      description: Include the branch, release, or full commit SHA.
+    validations:
+      required: true
+  - type: dropdown
+    id: environment
+    attributes:
+      label: Environment
+      options:
+        - Windows
+        - Linux
+        - macOS
+        - GitHub Actions
+        - Azure
+        - Other
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Problem
+      description: Describe expected and actual behavior.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: Provide the smallest repeatable sequence and sanitized logs.
+    validations:
+      required: true
+  - type: textarea
+    id: validation
+    attributes:
+      label: Validation attempted
+      description: List diagnostics, tests, or workarounds already attempted.
+    validations:
+      required: true
+  - type: checkboxes
+    id: safety
+    attributes:
+      label: Safety checks
+      options:
+        - label: I removed credentials, personal data, proprietary code, and sensitive prompts.
+          required: true
+        - label: This is not a security vulnerability.
+          required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/Coding-Autopilot-System/.github/security/policy
+    about: Report vulnerabilities privately according to the organization security policy.
+  - name: Support guidance
+    url: https://github.com/Coding-Autopilot-System/.github/blob/main/SUPPORT.md
+    about: Review support scope and required diagnostic information.

.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,41 @@
+name: Feature request
+description: Propose a scoped, testable improvement
+title: "[Feature]: "
+labels:
+  - enhancement
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user or operator problem should be solved?
+    validations:
+      required: true
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Desired outcome
+      description: Define observable acceptance criteria without prescribing implementation.
+    validations:
+      required: true
+  - type: textarea
+    id: safety
+    attributes:
+      label: Safety and operational impact
+      description: Describe permissions, identities, data, automation, and rollback impact.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Explain existing workarounds or simpler options.
+  - type: checkboxes
+    id: readiness
+    attributes:
+      label: Readiness
+      options:
+        - label: I searched for existing issues and pull requests.
+          required: true
+        - label: I can help validate the change.
+          required: false

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/."
+    schedule:
+      interval: "weekly"

.github/pull_request_template.md

@@ -0,0 +1,29 @@
+## Intent
+
+<!-- Explain the problem and the smallest coherent solution. -->
+
+## Changes
+
+<!-- List the behavior changed. Avoid a file inventory. -->
+
+## Risk And Safety
+
+- [ ] Permissions, identities, secrets, and data boundaries were reviewed.
+- [ ] AI-generated output and autonomous behavior were reviewed by a human.
+- [ ] No credentials, personal data, proprietary code, or sensitive prompts were added.
+- [ ] Breaking changes and migration requirements are documented.
+
+## Verification
+
+<!-- Include exact commands and meaningful results. -->
+
+- [ ] Tests, linting, and repository validation pass.
+- [ ] Documentation and examples match actual behavior.
+
+## Rollback
+
+<!-- Explain how to safely revert or disable this change. -->
+
+## Reviewer Focus
+
+<!-- Identify the highest-risk decisions and files. -->