chore(meta): audit and trim repository metadata

[Copilot]

Zi’s repository controls included generic, stale, and ineffective configuration. This change narrows metadata to active languages, generated artifacts, workflows, and GitHub features.

Changes

• Minimize .editorconfig, .gitattributes, and .gitignore; remove editor-specific and disabled-linter configuration.
• Upgrade and focus Trunk, retain one secret scanner, tighten Markdown rules, and run full-repository checks.
• Repair issue forms with live canonical labels, valid policy links, and Zi-specific prompts.
• Align the PR template and commit validator with all organization-approved Conventional Commit types and the ban on every Co-authored-by trailer.
• Apply least-privilege workflow permissions, workflow-qualified concurrency, immutable action pins, and complete Zsh validation for extensionless scripts.
• Preserve the legacy workflow deletions already present on next.
• Retain .github/dependabot.yml until the separately gated Renovate Stage 2 migration is approved.

Validation

• trunk check --all
• YAML parsing for issue forms, workflows, and Trunk configuration
• zsh -n and zcompile for every tracked Zsh source
• action SHA/version-comment and Conventional Commit policy checks

Fixes #374

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 28 out of 29 changed files in this pull request and generated 2 comments.

Suppressed comments (5)

.github/workflows/commit-lint.yml:75

• The PR-title check omits the policy-approved build and style types, so valid Conventional Commit titles are blocked. Keep this pattern aligned with the commit validator and organization policy.

          PATTERN='^(feat|fix|perf|refactor|docs|test|ci|chore|revert)(\([^)]+\))?!?: .{1,72}$'

.github/workflows/commit-lint.yml:37

• The canonical Conventional Commits policy also allows build and style, so this validator rejects organization-valid commits. Include both types in the pattern.

          CONVENTIONAL_PATTERN='^(feat|fix|perf|refactor|docs|test|ci|chore|revert)(\([^)]+\))?!?: .{1,72}$'

.github/PULL_REQUEST_TEMPLATE.md:11

• This advertised type list omits the organization-approved build and style types, conflicting with the canonical Conventional Commits policy. List the full allowed set so contributors are not told valid titles are invalid.

    Types: feat  fix  perf  refactor  docs  test  ci  chore  revert

.github/PULL_REQUEST_TEMPLATE.md:42

• The repository guidance and validator ban every Co-authored-by trailer, not only AI co-author trailers. This narrower checklist wording incorrectly implies human co-author trailers are permitted.

- [ ] No AI co-author trailers in commit messages

.github/PULL_REQUEST_TEMPLATE.md:43

• This checklist now directs contributors to docs/CONTRIBUTING.md, whose primary guidelines link still targets the removed z-shell/community path. Link the live canonical contribution guidelines directly so the repaired PR guidance does not lead users to a dead policy link.

- [ ] I have read [CONTRIBUTING.md](docs/CONTRIBUTING.md)

[Copilot]

Pull request overview

Copilot reviewed 28 out of 29 changed files in this pull request and generated no new comments.

Suppressed comments (5)

.github/workflows/commit-lint.yml:75

• The PR-title validator also rejects the organization-approved build and style types. It must use the same complete type set as the commit validator and canonical policy.

          PATTERN='^(feat|fix|perf|refactor|docs|test|ci|chore|revert)(\([^)]+\))?!?: .{1,72}$'

.github/PULL_REQUEST_TEMPLATE.md:42

• The checklist narrows the prohibition to AI trailers, but AGENTS.md:22 bans every Co-authored-by trailer. This wording incorrectly implies human co-author trailers are allowed.

- [ ] No AI co-author trailers in commit messages

.github/PULL_REQUEST_TEMPLATE.md:36

• The “Type of change” checklist omits four types advertised above (test, build, style, and revert), leaving contributors with no applicable box for those PRs. Include every supported category.

- [ ] `docs` — documentation only
- [ ] `ci` — CI/workflow change
- [ ] `chore` — maintenance / dependency bump

.github/workflows/commit-lint.yml:37

• This validator omits the organization-approved build and style Conventional Commit types, so compliant commits are rejected. Keep the accepted types aligned with the canonical policy.

This issue also appears on line 75 of the same file.

          CONVENTIONAL_PATTERN='^(feat|fix|perf|refactor|docs|test|ci|chore|revert)(\([^)]+\))?!?: .{1,72}$'

.github/PULL_REQUEST_TEMPLATE.md:11

• This advertised type list is incomplete: canonical Conventional Commits policy also permits build and style. As written, the template tells contributors that valid titles are unsupported.

This issue also appears in the following locations of the same file:

• line 34
• line 42

    Types: feat  fix  perf  refactor  docs  test  ci  chore  revert

[ss-o]

Reviewed against the live next baseline and issue #374 acceptance criteria; the scoped metadata changes and repository-native validations are complete.