chore: baseline README governance + CI workflow (#31)

* chore: add baseline README governance and CI workflow

* fix markdownlint/security placeholder in SECURITY.md

* chore: address baseline copilot review issues

---------

Co-authored-by: Zach Gonser <zachgonser@Zachs-Mac-Studio.local>

Author: zachyzissou

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Report a reproducible bug
+title: "[BUG] "
+labels: bug
+assignees: []
+---
+
+## Bug report
+
+**Checklist**
+- [ ] I checked existing issues and this is not a duplicate
+- [ ] I included repo branch, commit, and repro steps
+- [ ] I can reproduce this behavior consistently
+
+### Expected behavior
+A clear and concise description of what should happen.
+
+### Actual behavior
+What happened instead.
+
+### Environment
+- OS:
+- Branch/default branch:
+- Repo/commit:
+- Runtime versions (e.g., Node/Python/.NET):
+
+### Reproduction steps
+1. 
+2. 
+3. 
+
+### Logs / screenshots
+Paste relevant logs or upload screenshot files here.
+
+### Additional context
+Anything else that helps narrow root cause.

.github/pull_request_template.md

@@ -1,53 +1,26 @@
-## Pull Request
-
-### Description
-<!-- Provide a clear and concise description of what this PR accomplishes -->
-
-### Type of Change
-- [ ] 🐛 Bug fix (non-breaking change which fixes an issue)
-- [ ] ✨ New feature (non-breaking change which adds functionality)
-- [ ] 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
-- [ ] 📚 Documentation update
-- [ ] 🏗️ Refactoring (no functional changes)
-- [ ] ⚡ Performance improvement
-- [ ] 🧪 Tests
-- [ ] 🔧 Chore (maintenance tasks, dependencies, etc.)
-
-### Changes Made
-<!-- List the specific changes made in this PR -->
-- 
-- 
-- 
-
-### Testing
-- [ ] Tests have been added/updated for these changes
-- [ ] All existing tests pass
-- [ ] Manual testing completed
-
-### Quality Assurance
-- [ ] Code follows the existing style guidelines
-- [ ] Self-review of code completed
-- [ ] Comments added in hard-to-understand areas
-- [ ] Documentation updated (if applicable)
-
-### Deployment
-- [ ] Changes are backward compatible
-- [ ] No database migrations required
-- [ ] Environment variables documented (if added/changed)
-- [ ] Docker build tested locally
-
-### Screenshots (if applicable)
-<!-- Add screenshots for UI changes -->
-
-### Related Issues
-<!-- Link any related issues using keywords: Fixes #123, Closes #456, Relates to #789 -->
-
-### Checklist
-- [ ] PR title follows conventional commit format
-- [ ] All CI checks are passing
-- [ ] Code has been reviewed for security implications
-- [ ] Performance impact has been considered
-- [ ] Breaking changes are documented
-
-### Notes for Reviewers
-<!-- Any additional context or notes for reviewers -->
+## Summary
+Briefly describe what this PR changes.
+
+## Type of change
+- [ ] Docs / README
+- [ ] CI / automation
+- [ ] Security baseline files
+- [ ] Other
+
+## Validation
+Please include command outputs and checks run:
+- [ ] Lint:
+- [ ] Tests:
+- [ ] Build:
+- [ ] Security scan:
+
+## Related issues
+Closes/Fixes/Refs:
+
+## Checklist
+- [ ] README updated with required sections (overview, setup, usage, testing, security/privacy, governance)
+- [ ] SECURITY.md added/updated (if repo is in scope)
+- [ ] Issue template and PR template present
+- [ ] CODEOWNERS added/validated (public repos preferred)
+- [ ] CI files include this PR and pass locally
+- [ ] Branch note added if default branch is `master` or custom

CODEOWNERS

@@ -0,0 +1,21 @@
+# CODEOWNERS
+# Scope: baseline ownership for review routing
+# Replace handles with actual repo owners/maintainers.
+
+# Global owners
+*       @zachyzissou
+
+# Documentation and automation
+/README.md @zachyzissou
+/.github/** @zachyzissou
+
+# Source ownership (optional split by stack)
+# *.py @python-maintainers
+# *.cs @dotnet-maintainers
+# *.ts @frontend-maintainers
+# *.tsx @frontend-maintainers
+# *.astro @web-maintainers
+
+# Infrastructure and security
+/.github/workflows/** @zachyzissou
+/SECURITY.md @zachyzissou