PROD-039 Establish the repository governance baseline

[rndrntwrk]

Canonical source: docs/release/github-project-production-backlog.md

Epic: Repository Governance, Review Automation, And OSS Housekeeping

• ID: PROD-039
• Title: Establish the repository governance baseline
• Type: docs
• Priority: P1
• Scope: active
• Area: repo-governance
• Description: Add the missing repository control-plane files that make review,
  ownership, disclosure, and contribution expectations explicit from day one.
• Acceptance criteria:
  • .github/CODEOWNERS exists with clear ownership for protocol, keeper, app,
    workflows, docs, and release surfaces
  • CONTRIBUTING.md exists with branch, commit, testing, and PR expectations
  • SECURITY.md exists with vulnerability reporting and embargo guidance
  • .github/PULL_REQUEST_TEMPLATE.md and .github/ISSUE_TEMPLATE/ exist
• Dependencies: owner list and escalation path
• Source docs: tracking-document-map.md,
  production-readiness-audit-2026-03-29.md,
  external benchmarks: milady/.github/PULL_REQUEST_TEMPLATE.md,
  HyperscapeAI/hyperscape/.github/CODEOWNERS
• Suggested owner: release
• Blocker class: quality-blocking