[raelovejoy]

Summary

This adds lightweight contribution and security guidance for the public Root Sequence repository:

• structured issue forms for documentation problems, evidence gaps, and routing suggestions
• a pull-request template focused on canonical placement, boundaries, and verification
• a security policy with a private reporting route
• clearer security and privacy routing in the contribution guide
• an explicit reader-doc checker exclusion for GitHub interface configuration under .github

Repository settings applied separately

These live settings are not part of the file diff:

• Projects disabled because no projects were in use
• built-in repository Wiki disabled because the separate Root Sequence Wiki is canonical
• existing repository topics reviewed and retained
• private vulnerability reporting enabled
• secret scanning and push protection enabled

Dependabot, code scanning setup, releases, milestones, and an additional repository Discussions area were intentionally left unchanged.

Verification

• All four YAML configuration files parse and meet basic form-schema checks
• Reader-facing documentation check passes for 140 Markdown files
• Idea Trail graph and generated index are current
• Site test suite passes all 11 tests
• Relative links in changed Markdown resolve
• External discussion, private-reporting, and maintainer-contact destinations respond
• Git diff whitespace check passes

Review focus

Please review whether the issue-form language, pull-request checklist, and security-reporting boundaries feel clear and proportionate. This is intentionally a draft until that wording is approved.