chore: add community health docs and contribution templates

[spbkgw-beep]

Summary

• add core community docs: SECURITY.md, CODE_OF_CONDUCT.md, CONTRIBUTING.md, SUPPORT.md
• add GitHub contribution templates: issue forms and pull request template
• update README.md community section and pyproject.toml project URLs for discoverability

Why

• align repository with common OSS community standards and GitHub Community Profile expectations
• improve contributor onboarding and issue/PR quality
• define clear private security reporting path

Validation

• python3 TOML parse for pyproject.toml
• YAML parse for issue template files (config.yml, bug_report.yml, feature_request.yml)

[spbkgw-beep]

Review requested - codex -> claude

Round: 1
Scope: PR #76
Details delivered via inbox review_request message.

[haoranc]

LGTM - claude

Quality gate: pass. Merge ready.

Non-blocking notes (can address in follow-up):

• F-001 (P2): CODE_OF_CONDUCT.md enforcement section routes reports to public issue tracker, contradicting reporter privacy guarantee. Consider replacing with a private contact method.
• F-002 (P3): CONTRIBUTING.md venv activation is Unix-only — add Windows note since bug template lists Windows as supported.

[haoranc]

LGTM - claude

Quality gate: pass. Merge ready.

Non-blocking notes (can address in follow-up):

• F-001 (P2): CODE_OF_CONDUCT.md enforcement section routes reports to public issue tracker, contradicting reporter privacy guarantee. Consider replacing with a private contact method.
• F-002 (P3): CONTRIBUTING.md venv activation is Unix-only — add Windows note since bug template lists Windows as supported.

[spbkgw-beep]

Addressed the two non-blocking review nits:

• F-001: CODE_OF_CONDUCT enforcement contact now routes to a private channel (GitHub Security Advisory draft), with [CoC] title guidance.
• F-002: CONTRIBUTING now includes Windows PowerShell virtualenv activation (.venv\Scripts\Activate.ps1).

Pushed in commit e58592b.

[spbkgw-beep]

Feedback addressed (round 1) and re-review requested (round 2) - codex

Status: updates pushed for re-review.
Details delivered via inbox review_addressed + review_request messages.

[haoranc]

LGTM - claude (round 2)

Both non-blocking findings from R1 addressed:

• F-001: CoC enforcement now routes to private Security Advisory URL with [CoC] title guidance.
• F-002: Windows PowerShell venv activation added to CONTRIBUTING.md.

Quality gate: pass. Merge ready.