chore: relicense to AGPL-3.0 with dual-licensing and contributor CLA (#24)

Relicense devcoach from Apache-2.0 to AGPL-3.0-only (strong copyleft,
dual-licensed with a separate commercial option). Update the license across
LICENSE, package.json, the mcpb and plugin manifests, the Homebrew formula
generator, the README (badge + License section + Licensing FAQ), and the
docs site (new License page + footer copyright).

Add GitHub-native contribution infrastructure: a contributor CLA enforced by
the CLA Assistant workflow, plus a Code of Conduct, a Security policy, issue
and pull-request templates, and CODEOWNERS.

Versions published before this change remain under Apache-2.0.

Author: UltimaPhoenix

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# Every change requires review from the maintainer.
+# This auto-requests @UltimaPhoenix as a reviewer on all pull requests.
+* @UltimaPhoenix

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# Funding / sponsorship links shown on the repo's "Sponsor" button.
+# Uncomment and fill in once the corresponding account is set up.
+# github: [UltimaPhoenix]
+# custom: ["https://github.com/UltimaPhoenix/dev-coach#license"]

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,63 @@
+name: 🐞 Bug report
+description: Something in devcoach isn't working as expected.
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: Thanks for taking the time to report a bug. Please fill in the details below.
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: A clear description of the bug, and what you expected instead.
+      placeholder: When I run `devcoach …`, I expected … but got …
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Steps to reproduce
+      description: Minimal steps so we can reproduce it.
+      placeholder: |
+        1. Run `npx -y devcoach …`
+        2. …
+        3. See error
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: devcoach version
+      description: Output of `npx devcoach --version`.
+      placeholder: 0.5.0
+    validations:
+      required: true
+  - type: dropdown
+    id: surface
+    attributes:
+      label: Where did it happen?
+      options:
+        - MCP server (Claude Code / Desktop / other agent)
+        - CLI
+        - Web dashboard (UI)
+        - Claude Desktop extension (.mcpb)
+        - Other / not sure
+    validations:
+      required: true
+  - type: input
+    id: environment
+    attributes:
+      label: Environment
+      description: OS and Node version (`node --version`).
+      placeholder: macOS 15 · Node 24.3.0
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / screenshots
+      description: Any relevant error output. This will be rendered as code, so no backticks needed.
+      render: shell
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: 📚 Documentation
+    url: https://ultimaphoenix.github.io/dev-coach/
+    about: Check the docs first — installation, usage, and reference guides.
+  - name: 💬 Questions & ideas
+    url: https://github.com/UltimaPhoenix/dev-coach/discussions
+    about: Ask a question or float an idea in Discussions instead of opening an issue.
+  - name: 🔒 Report a security vulnerability
+    url: https://github.com/UltimaPhoenix/dev-coach/security/advisories/new
+    about: Please report vulnerabilities privately, not as a public issue.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,33 @@
+name: 💡 Feature request
+description: Suggest an idea or improvement for devcoach.
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: What problem does this solve?
+      description: Describe the need or pain point. "I'm always frustrated when …"
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What would you like devcoach to do?
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any other approaches or workarounds you've thought about.
+    validations:
+      required: false
+  - type: checkboxes
+    id: scope
+    attributes:
+      label: Confirmation
+      options:
+        - label: This fits devcoach's scope (a local, progressive technical coach), and I searched existing issues first.
+          required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,25 @@
+<!-- Thanks for contributing to devcoach! Please fill this in so the change is easy to review. -->
+
+## What & why
+
+<!-- What does this PR change, and why? Link any related issue (e.g. "Closes #123"). -->
+
+## Changes
+
+<!-- Briefly list the notable changes. State clearly anything you modified in existing behaviour. -->
+
+-
+
+## Checklist
+
+- [ ] `npm run lint` passes (Biome)
+- [ ] `npm run typecheck` passes
+- [ ] `npm run test:cov` passes (coverage stays ≥ 80% lines)
+- [ ] I kept the PR focused (one logical change)
+- [ ] I updated docs / `CHANGELOG.md` where relevant
+- [ ] I have read and will sign the [Contributor License Agreement](../CLA.md) — the CLA Assistant
+      bot will prompt me on this PR. I understand my contribution may be licensed under **both**
+      AGPL-3.0 and a commercial license.
+
+> By submitting this pull request, I confirm that my contribution is made under the terms of the
+> project's license and the CLA.

.github/workflows/cla.yml

@@ -0,0 +1,38 @@
+name: CLA Assistant
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, synchronize]
+
+permissions:
+  actions: write
+  contents: write
+  pull-requests: write
+  statuses: write
+
+jobs:
+  cla:
+    name: CLA Assistant
+    runs-on: ubuntu-latest
+    steps:
+      - name: CLA Assistant
+        if: >-
+          (github.event.comment.body == 'recheck' ||
+           github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') ||
+          github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@v2.6.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          path-to-signatures: signatures/version1/cla.json
+          path-to-document: https://github.com/UltimaPhoenix/dev-coach/blob/main/CLA.md
+          branch: cla-signatures
+          allowlist: UltimaPhoenix,dependabot[bot],github-actions[bot]
+          custom-pr-sign-comment: I have read the CLA Document and I hereby sign the CLA
+          custom-notsigned-prcomment: >-
+            Thank you for your contribution! Before we can merge it, please read our
+            [Contributor License Agreement](https://github.com/UltimaPhoenix/dev-coach/blob/main/CLA.md)
+            and sign it by posting the following comment on this pull request:
+          custom-allsigned-prcomment: ✅ All contributors have signed the CLA.

CHANGELOG.md

@@ -4,6 +4,21 @@ Notable changes to devcoach. Versions follow [Semantic Versioning](https://semve
 
 ---
 
+## [Unreleased]
+
+### Changed
+- **License**: relicensed from **Apache-2.0** to **AGPL-3.0-only** (`LICENSE`). devcoach stays free and
+  open source; a separate commercial license is available for proprietary/closed use. Versions
+  published before this change remain under Apache-2.0.
+
+### Added
+- **Contributor License Agreement** (`CLA.md`) enforced by a CLA Assistant workflow, enabling the
+  AGPL + commercial dual-licensing model
+- **Community health files**: `CODE_OF_CONDUCT.md`, `SECURITY.md`, issue & pull-request templates,
+  `CODEOWNERS`, and a **License & commercial use** docs page
+
+---
+
 ## [0.3.66] — unreleased
 
 ### Changed

CLA.md

@@ -0,0 +1,64 @@
+# devcoach Individual Contributor License Agreement (CLA)
+
+Thank you for your interest in contributing to **devcoach** ("the Project"), maintained by
+**UltimaPhoenix** ("the Maintainer").
+
+This Contributor License Agreement ("Agreement") sets out the terms under which You contribute. It
+protects You, the Maintainer, and the users of the Project, and it allows the Project to be offered
+under **both** the open-source AGPL-3.0 license **and** a separate commercial license. Please read it
+carefully before submitting a Contribution.
+
+By submitting a Contribution to the Project (for example, by opening a pull request), You accept and
+agree to the following terms for Your present and future Contributions.
+
+## 1. Definitions
+
+- **"You" / "Your"** means the individual or legal entity that owns, or is legally entitled to grant
+  the licenses for, the copyright in the Contribution and that submits it to the Project.
+- **"Contribution"** means any original work of authorship, including any modifications or additions
+  to existing work, that You intentionally submit to the Project in any form (code, documentation,
+  configuration, etc.).
+
+## 2. Copyright license
+
+You grant to the Maintainer and to recipients of software distributed by the Maintainer a perpetual,
+worldwide, non-exclusive, royalty-free, irrevocable copyright license to reproduce, prepare
+derivative works of, publicly display, publicly perform, sublicense, and distribute Your Contribution
+and such derivative works.
+
+**You expressly agree that the Maintainer may license Your Contribution under any terms, including the
+GNU Affero General Public License v3.0, any other open-source license, and proprietary/commercial
+license terms.** This dual-licensing right is essential to the Project's sustainability.
+
+## 3. Patent license
+
+You grant to the Maintainer and to recipients of software distributed by the Maintainer a perpetual,
+worldwide, non-exclusive, royalty-free, irrevocable (except as stated below) patent license to make,
+have made, use, offer to sell, sell, import, and otherwise transfer Your Contribution. This license
+applies only to those patent claims licensable by You that are necessarily infringed by Your
+Contribution alone or by the combination of Your Contribution with the Project. If any entity
+institutes patent litigation alleging that Your Contribution, or the Project to which You
+contributed, constitutes direct or contributory patent infringement, then any patent licenses granted
+under this Agreement for that Contribution shall terminate as of the date such litigation is filed.
+
+## 4. Your representations
+
+- The Contribution is Your original creation and You have the right to grant the licenses above.
+- If Your employer has rights to intellectual property You create, You represent that You have
+  received permission to make the Contribution on behalf of that employer, or that Your employer has
+  waived such rights for the Contribution.
+- To Your knowledge, the Contribution does not violate any third-party license, patent, copyright,
+  trademark, or other right.
+- Each part of Your Contribution that is not Your original creation is identified as such, together
+  with its source and any license or restriction You are aware of.
+
+## 5. No obligation
+
+You are not expected to provide support for Your Contribution, except to the extent You desire to do
+so. The Contribution is provided "as is", without warranty of any kind, express or implied.
+
+---
+
+By signing electronically via the CLA Assistant bot on your pull request — that is, by commenting the
+exact phrase **`I have read the CLA Document and I hereby sign the CLA`** — You agree to the terms of
+this Agreement for all of Your current and future Contributions to the Project.