Merge pull request #1558 from tailor-platform/chore/codeowner

Author: toiroakr

.github/CODEOWNERS

@@ -1,6 +1,9 @@
 # Default code owners for all files
 * @tailor-platform/contributor-sdk
 
-# Changeset release PRs (Version Packages) always touch CHANGELOG.md,
-# so releases require review from maintainers.
-CHANGELOG.md @tailor-platform/maintainers-sdk
+# Security-sensitive files — supply-chain and CI/CD risk
+.github/CODEOWNERS @tailor-platform/maintainers-sdk
+.github/workflows/ @tailor-platform/maintainers-sdk
+**/package.json @tailor-platform/maintainers-sdk
+**/pnpm-lock.yaml @tailor-platform/maintainers-sdk
+pnpm-workspace.yaml @tailor-platform/maintainers-sdk