- chore(deps): bump electron to 42.11.10 and @electron/rebuild to 4.2.0
- chore(otel): migrate to OpenTelemetry 2.x SDK
- fix(deps): pin transitive overrides to clear remaining prod advisories; gate CI on npm audit
- docs(security): add SECURITY.md and enable private vulnerability reporting
- docs(contributing): add CONTRIBUTING.md + CODE_OF_CONDUCT.md, link from README
- docs(github): add issue forms, security contact link, and PR template
- chore(deps): add Dependabot config, enable security alerts, set repo topics

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>