BLD - add GitHub contribution and release automation (#3)

* BLD - add GitHub contribution and release automation

* BLD - restrict dev merges to maintainers

* BLD - add automated review and PR test resources

* DOC - require AI governance checks

* FIX - pin patched nanoid dependency

* TRY - trigger webhook delivery

* TRY - verify webhook routing

* TRY - rerun pull request checks

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,114 @@
+name: Bug report
+description: Report a reproducible problem in Sky Phone.
+title: "[Bug] "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping improve Sky Phone. Search existing issues first and remove secrets, tokens, player identifiers, and private URLs from all logs.
+
+  - type: input
+    id: version
+    attributes:
+      label: Sky Phone version
+      description: Use the release tag or exact commit SHA. "Latest" is not a version.
+      placeholder: 0.1.0 or 0123456789abcdef...
+    validations:
+      required: true
+
+  - type: dropdown
+    id: framework
+    attributes:
+      label: Framework
+      options:
+        - ESX Legacy
+        - QBCore
+        - Qbox
+        - Other or custom bridge
+    validations:
+      required: true
+
+  - type: input
+    id: artifacts
+    attributes:
+      label: FiveM server artifact
+      description: Provide the exact artifact build number.
+      placeholder: "12345"
+    validations:
+      required: true
+
+  - type: input
+    id: database
+    attributes:
+      label: Database
+      description: Include product and version, for example MariaDB 11.4.
+      placeholder: MariaDB 11.4
+    validations:
+      required: true
+
+  - type: textarea
+    id: integrations
+    attributes:
+      label: Relevant integrations
+      description: List the configured inventory, voice, housing, garage, media, and other providers involved.
+      placeholder: |
+        Inventory: ox_inventory 2.x
+        Voice: pma-voice 1.x
+    validations:
+      required: false
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Problem description
+      description: Describe what happens and which player or server state is affected.
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction steps
+      description: Provide the smallest reliable sequence, starting from a clean resource restart where possible.
+      placeholder: |
+        1. Start ...
+        2. Open ...
+        3. Select ...
+        4. Observe ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Client, server, and NUI evidence
+      description: Attach relevant F8, server console, NUI console, network, or database output. Include the first error, not only follow-up errors.
+    validations:
+      required: true
+
+  - type: textarea
+    id: regression
+    attributes:
+      label: Regression information
+      description: State the last known working tag or commit, if applicable.
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: confirmations
+    attributes:
+      label: Confirmation
+      options:
+        - label: I reproduced this with the resource from this repository and included its exact version.
+          required: true
+        - label: I removed secrets, credentials, private URLs, and player-identifying data.
+          required: true
+        - label: This is not an exploitable security vulnerability that should be reported privately.
+          required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/sky-systems/sky_phone/security/advisories/new
+    about: Report exploitable vulnerabilities privately. Do not open a public issue.
+  - name: Installation and configuration support
+    url: https://discord.gg/sky-systems
+    about: Ask for setup help in the Sky-Systems community.

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,35 @@
+name: Documentation improvement
+description: Report missing, incorrect, or unclear project documentation.
+title: "[Docs] "
+body:
+  - type: input
+    id: location
+    attributes:
+      label: Documentation location
+      description: Link the section or provide the repository path and heading.
+      placeholder: README.md, Quick installation
+    validations:
+      required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: What is unclear or incorrect?
+    validations:
+      required: true
+
+  - type: textarea
+    id: correction
+    attributes:
+      label: Suggested correction
+      description: Include verified runtime, configuration, or version context where relevant.
+    validations:
+      required: true
+
+  - type: checkboxes
+    id: confirmations
+    attributes:
+      label: Confirmation
+      options:
+        - label: I checked the current default branch before reporting this.
+          required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,82 @@
+name: Feature request
+description: Propose a focused improvement to Sky Phone.
+title: "[Feature] "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Explain the user problem before the proposed implementation. New features must preserve Sky Phone's standalone architecture and server-authoritative state changes.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem or opportunity
+      description: Who needs this, and what can they not do today?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe the user-visible result and the expected client, server, NUI, or persistence flow.
+    validations:
+      required: true
+
+  - type: dropdown
+    id: scope
+    attributes:
+      label: Primary area
+      options:
+        - Phone app or NUI
+        - Client behavior
+        - Server behavior
+        - Framework or third-party integration
+        - Configuration or localization
+        - Database or migration
+        - Developer API or custom apps
+        - Build, release, or documentation
+    validations:
+      required: true
+
+  - type: textarea
+    id: authority
+    attributes:
+      label: Authority and data ownership
+      description: For state-changing behavior, explain what the server validates and which sky_phone-owned data changes.
+    validations:
+      required: false
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Describe existing configuration, integrations, or workflows that were considered.
+    validations:
+      required: false
+
+  - type: textarea
+    id: compatibility
+    attributes:
+      label: Compatibility impact
+      description: Note affected frameworks, providers, configs, locales, schemas, exports, or public events.
+    validations:
+      required: false
+
+  - type: textarea
+    id: references
+    attributes:
+      label: References or mockups
+      description: Attach concise examples, diagrams, or screenshots when they materially clarify the request.
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: confirmations
+    attributes:
+      label: Confirmation
+      options:
+        - label: This proposal does not require sky_base, sky_jobs_base, or another Sky resource.
+          required: true
+        - label: I searched for an existing issue covering the same request.
+          required: true