docs: rename repo URLs and restructure README for OSS (#142)

- Rename repo references from intility/Intility.JsonApiToolkit to
intility/json-api-toolkit
- Restructure README in Intility OSS style
- Tighten documentation
- Drop GitHub Packages install instructions in favor of dotnet add
package
- Closes #98

Author: erlendellefsen

.github/CODEOWNERS

@@ -1,5 +1 @@
-# Default owner for everything
 * @erlendellefsen
-
-# Security-sensitive files require extra review
-.github/workflows/** @erlendellefsen

.github/ISSUE_TEMPLATE/1-basic-issue.yml

@@ -3,10 +3,6 @@ description: File a basic issue.
 type: Task
 projects: ['intility/56']
 body:
-  - type: markdown
-    attributes:
-      value: |
-        Thanks for taking the time to fill out this issue!
   - type: textarea
     attributes:
       label: What's the issue?

.github/ISSUE_TEMPLATE/2-feature_request.yml

@@ -4,35 +4,17 @@ labels: ['enhancement']
 type: Feature
 projects: ['intility/56']
 body:
-  - type: markdown
-    attributes:
-      value: |
-        Thanks for taking the time to request a new feature or enhancement. Please fill out the form below to help us understand your request.
   - type: textarea
     id: feature-request
     attributes:
       label: Feature request
-      description: Please describe the feature you would like to see.
-      placeholder: I would like to see...
+      description: What would you like to see?
     validations:
       required: true
   - type: textarea
     id: use-case
     attributes:
       label: Use case
-      description: Please describe the use case for this feature.
-      placeholder: This feature would be useful for...
-    validations:
-      required: false
-  - type: dropdown
-    id: priority
-    attributes:
-      label: Priority
-      description: Please select the priority of this feature request.
-      options:
-        - Low
-        - Medium
-        - High
-      default: 2
+      description: What problem does this solve? Why is the current behavior insufficient?
     validations:
       required: true

.github/ISSUE_TEMPLATE/3-bug-report.yml

@@ -4,32 +4,38 @@ labels: ['bug']
 type: Bug
 projects: ['intility/56']
 body:
-  - type: markdown
-    attributes:
-      value: |
-        Thanks for taking the time to fill out this bug report!
   - type: textarea
     id: what-happened
     attributes:
       label: What happened?
-      description: Also tell us, what did you expect to happen?
-      placeholder: Tell us what you see!
-      value: 'A bug happened!'
+      description: What did you observe, and what did you expect instead?
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Steps to reproduce
+      description: Minimal repro steps. Code snippet, request, or test case if possible.
+      render: csharp
     validations:
       required: true
-  - type: dropdown
-    id: browsers
+  - type: input
+    id: toolkit-version
     attributes:
-      label: What browsers are you seeing the problem on?
-      multiple: true
-      options:
-        - Firefox
-        - Chrome
-        - Safari
-        - Microsoft Edge
+      label: JsonApiToolkit version
+      placeholder: e.g. 2.1.0
+    validations:
+      required: true
+  - type: input
+    id: dotnet-version
+    attributes:
+      label: .NET version
+      placeholder: e.g. 10.0
+    validations:
+      required: true
   - type: textarea
     id: logs
     attributes:
-      label: Relevant log output
-      description: Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
+      label: Relevant logs
+      description: Optional. Paste relevant log output. Formatting is automatic.
       render: shell

.github/codeql/codeql-config.yml

@@ -0,0 +1,5 @@
+name: "JsonApiToolkit CodeQL"
+
+paths-ignore:
+  - "**/bin/**"
+  - "**/obj/**"

.github/dependabot.yml

@@ -14,7 +14,6 @@ updates:
     commit-message:
       prefix: "build(nuget)"
     groups:
-      # Group minor/patch updates to reduce PR noise
       microsoft:
         patterns:
           - "Microsoft.*"

.github/pull_request_template.md

@@ -0,0 +1,7 @@
+## Summary
+
+<!-- What does this change and why? -->
+
+## Related issues
+
+<!-- Closes #123, Refs #456 -->

.github/workflows/codeql.yml

@@ -2,7 +2,8 @@ name: CodeQL
 
 on:
   schedule:
-    - cron: "0 6 * * 1" # Monday 6am UTC
+    - cron: "0 6 * * 1"
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -32,6 +33,7 @@ jobs:
         with:
           languages: csharp
           queries: security-and-quality
+          config-file: ./.github/codeql/codeql-config.yml
 
       - name: Restore
         run: dotnet restore --locked-mode

.github/workflows/release-please.yml

@@ -21,7 +21,7 @@ jobs:
       - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
         id: app-token
         with:
-          app-id: ${{ vars.RELEASE_BOT_APP_ID }}
+          client-id: ${{ vars.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
 
       - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7

AGENTS.md

@@ -17,5 +17,5 @@ Set `"JsonApiToolkit": "Debug"` in appsettings.json to enable detailed query pro
 - **Pagination clamping**: Invalid page numbers are silently clamped (negative/zero -> page 1, overflow -> last page).
 - **Malformed query params**: Bad filter/sort/include syntax is logged and skipped, not thrown as exceptions.
 - **Filtered includes**: Dot notation in filters (e.g. `filter[author.name]=John`) applies to included resources when `include=author` is also set.
-- **Include whitelisting**: `AllowedIncludesAttribute` on controller actions restricts which relationships can be requested via `include=`, preventing unauthorized data exposure.
+- **Include allowlisting**: `AllowedIncludesAttribute` on controller actions restricts which relationships can be requested via `include=`, preventing unauthorized data exposure.
 - **Sparse fieldsets**: `fields[type]=field1,field2` works for both primary and included resources. `id` and `type` are always returned.