chore: fix release publishing and complete repo hygiene

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @AKogut

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,28 @@
+name: Bug report
+description: Something is broken
+labels: ['type:bug']
+body:
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened
+      description: What did you expect, and what happened instead?
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Reproduction
+      description: Minimal steps, config or repository to reproduce
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: Package versions or commit sha
+  - type: textarea
+    id: context
+    attributes:
+      label: Environment
+      description: OS, node version, CI provider, test framework

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Questions & ideas
+    url: https://github.com/AKogut/flakemetry/discussions
+    about: Use Discussions for questions, ideas and design debate

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,21 @@
+name: Feature request
+description: Propose an improvement
+labels: ['type:feature']
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What problem does this solve? Who has it?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,14 @@
+## What
+
+<!-- One or two sentences: what does this PR do? -->
+
+## Why
+
+Closes #
+
+## Checklist
+
+- [ ] Branch follows `<type>/<issue>-<slug>` and the commit follows Conventional Commits
+- [ ] `pnpm build && pnpm lint && pnpm typecheck && pnpm test` green locally
+- [ ] Changeset added if a published package changed (`pnpm changeset`)
+- [ ] Docs / ADR updated if behaviour or a load-bearing decision changed

.github/workflows/release.yml

@@ -35,10 +35,7 @@ jobs:
       - uses: changesets/action@v1
         with:
           version: pnpm changeset version
-          publish: pnpm changeset publish
           title: 'chore: version packages'
           commit: 'chore: version packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NPM_CONFIG_PROVENANCE: 'true'

CODE_OF_CONDUCT.md

@@ -0,0 +1,7 @@
+# Code of Conduct
+
+This project follows the [Contributor Covenant, version 2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).
+
+In short: be respectful, be constructive, assume good intent, and keep discussions about code and ideas — never about people. Harassment, discrimination and personal attacks are not tolerated in any project space.
+
+Violations can be reported privately to the maintainer at a.kogut01@gmail.com. Reports are reviewed confidentially, and the maintainer may warn, temporarily restrict, or permanently ban participants whose behaviour violates this code.

SECURITY.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+Please do not open public issues for security vulnerabilities.
+
+Report privately via [GitHub Security Advisories](https://github.com/AKogut/flakemetry/security/advisories/new). You will receive an acknowledgement within 72 hours and a status update as the report is triaged.
+
+## Scope
+
+The self-hosted platform (api, worker, web), the published `@flakemetry/*` packages, and the GitHub Action. A dedicated threat model and hardening pass is tracked for the SaaS milestone.
+
+## Supported versions
+
+Pre-1.0: only the latest published version of each package receives security fixes.

packages/ai/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/ai",
   "version": "0.0.0",
   "description": "LLM provider abstraction and root-cause analysis",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/ai"
+  },
   "publishConfig": {
     "access": "public"
   },

packages/cli/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/cli",
   "version": "0.0.0",
   "description": "Command line interface for Flakemetry",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/cli"
+  },
   "publishConfig": {
     "access": "public"
   },

packages/contracts/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/contracts",
   "version": "0.0.0",
   "description": "Shared zod schemas and inferred types across ingestion, api, worker and web",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/contracts"
+  },
   "publishConfig": {
     "access": "public"
   },

packages/core/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/core",
   "version": "0.0.0",
   "description": "Pure domain logic: test identity and flaky scoring",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/core"
+  },
   "publishConfig": {
     "access": "public"
   },

packages/reporter/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/playwright-reporter",
   "version": "0.0.0",
   "description": "Playwright reporter emitting OpenTelemetry test spans",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/reporter"
+  },
   "publishConfig": {
     "access": "public"
   },

packages/sdk/package.json

@@ -2,6 +2,15 @@
   "name": "@flakemetry/sdk",
   "version": "0.0.0",
   "description": "OpenTelemetry test instrumentation and ingest client",
+  "license": "MIT",
+  "author": "Andrii Kohut",
+  "homepage": "https://github.com/AKogut/flakemetry#readme",
+  "bugs": "https://github.com/AKogut/flakemetry/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AKogut/flakemetry.git",
+    "directory": "packages/sdk"
+  },
   "publishConfig": {
     "access": "public"
   },