chore: add repository governance files (CODEOWNERS, CONTRIBUTING, SEC…

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Default owner for all files
+* @Alcheri

CONTRIBUTING.md

@@ -0,0 +1,20 @@
+# Contributing
+
+Thank you for considering a contribution.
+
+This project uses:
+
+- DCO sign-off
+- Required CI checks
+- CodeQL security scanning
+- Protected default branch rules
+
+## Commit sign-off
+
+All commits must be signed off using the Developer Certificate of Origin.
+
+Use:
+
+```bash
+git commit -s -m "Describe your change"
+```

SECURITY.md

@@ -0,0 +1,23 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates apply to the latest commit on the `main` branch. Older tags or branches may not receive fixes.
+
+## Reporting a Vulnerability
+
+If you discover a security issue, please report it privately.
+
+- Email: <barry.suridge@gmail.com>
+- Do not open a public GitHub issue.
+- Provide clear steps to reproduce the problem if possible.
+
+You will receive an acknowledgement within 72 hours.
+
+## Scope
+
+This project is intended for controlled environments. It does not guarantee protection against untrusted networks, hostile users, or adversarial workloads.
+
+## Disclosure
+
+Once a fix is available, a short summary of the issue may be published. Sensitive details may be withheld to protect downstream users.