chore(public): add CI coverage security and OSS process visibility

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,42 @@
+name: Bug report
+description: Report a reproducible defect with sanitized evidence.
+title: "fix: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not publish secrets, tokens, private keys, personal data, real employee logs or customer evidence. Use demo/anonymized evidence.
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What is broken?
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Reproduction steps
+      description: Minimal steps using sanitized data.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Sanitized evidence
+      description: Logs, screenshots or output with secrets and personal data removed.
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,42 @@
+name: Feature request
+description: Request a capability without using customer or employee data.
+title: "feat: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not publish secrets, personal data, real employee logs or non-anonymized customer evidence.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user or operator problem should this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe the desired behavior conservatively.
+    validations:
+      required: true
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      options:
+        - Workforce
+        - Security analytics
+        - Forensics
+        - Registry-readiness
+        - Install/deployment
+        - Documentation
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Demo/anonymized evidence
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/registry_readiness_task.yml

@@ -0,0 +1,29 @@
+name: Registry-readiness task
+description: Track registry-readiness documentation, evidence or process gaps.
+title: "docs(registry): "
+labels: ["registry-readiness", "documentation"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not claim legal completion of registry registration. Do not publish secrets, personal data, real employee logs or private infrastructure credentials.
+  - type: textarea
+    id: scope
+    attributes:
+      label: Scope
+      description: What registry-readiness gap is being tracked?
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Required evidence
+      description: List sanitized evidence or documents needed.
+    validations:
+      required: true
+  - type: textarea
+    id: remaining
+    attributes:
+      label: Remaining gaps
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/security_hardening_task.yml

@@ -0,0 +1,30 @@
+name: Security hardening task
+description: Track hardening without exposing sensitive data.
+title: "chore(security): "
+labels: ["security", "hardening"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not publish exploits, secrets, private keys, tokens, personal data, real employee logs or customer evidence.
+  - type: textarea
+    id: hardening
+    attributes:
+      label: Hardening target
+      description: What should be hardened?
+    validations:
+      required: true
+  - type: textarea
+    id: risk
+    attributes:
+      label: Risk addressed
+      description: Explain the risk without sensitive details.
+    validations:
+      required: true
+  - type: textarea
+    id: validation
+    attributes:
+      label: Validation
+      description: Checks or evidence required.
+    validations:
+      required: true