feat: prepare repository for open-source release

[Aadil-5122]

Summary

Prepares hydradb-cli for open-source release by adding governance files, GitHub infrastructure, CI pipeline, development tooling, and fixing all code quality issues.

28 files changed (+966 / -349 lines)

---

1. Governance Files (new)

File	Description
CONTRIBUTING.md	Contributor guide -- references the project's actual tools (Typer, httpx, Rich, pytest), actual commands (make bootstrap, make test), and actual project structure. Includes DCO sign-off requirement.
CODE_OF_CONDUCT.md	Community standards with enforcement contact (conduct@hydradb.com)
SECURITY.md	Vulnerability disclosure policy with security contact (security@hydradb.com). Documents credential storage security (0600 permissions, API key masking).

All governance content is original -- written specifically for HydraDB CLI.

Note: LICENSE (MIT) already existed and was not modified. See the "License Inconsistency" note below.

---

2. GitHub Infrastructure (new)

File	Description
.github/workflows/ci.yml	CI pipeline with 3 jobs: lint (ruff check + format), test (pytest on Python 3.10/3.11/3.12/3.13 matrix), dco-check (DCO sign-off enforcement on PRs)
.github/ISSUE_TEMPLATE/bug_report.yml	Structured bug report template (CLI version, Python version, OS, steps to reproduce)
.github/ISSUE_TEMPLATE/feature_request.yml	Feature request template
.github/ISSUE_TEMPLATE/config.yml	Issue template chooser config
.github/PULL_REQUEST_TEMPLATE.md	PR template with checklist (tests, lint, DCO sign-off)
.github/CODEOWNERS	Auto-assigns @usecortex/hydradb-maintainers for review

---

3. Development Tooling (new)

File	Description
Makefile	Targets: bootstrap, lint, format, test, coverage, clean, help. Includes venv guards.
scripts/bootstrap.sh	One-command setup: creates venv, installs package + dev tools
pyproject.toml changes	Added [dev] optional deps (ruff, pytest, pytest-cov), ruff config matching org-wide rule selection

---

4. Code Quality Fixes

• Unused imports removed: print_warning in auth.py, Optional in config_cmd.py, Panel/Text in output.py, typer in common.py, stale imports in test_config.py
• Empty f-strings fixed in auth.py and fetch.py
• Nested with statements combined in test_client.py (SIM117)
• zip(strict=True) added in output.py for safety
• Import sorting (isort) applied across all files
• ruff format applied across all 20 Python files

---

5. Repo Hygiene

File	Change
.gitignore	Expanded with section headers, added .ruff_cache/, IDE files, OS files

---

Testing

Verified Locally (all pass)

#	Test	Command	Result
1	Fresh bootstrap	rm -rf .venv && make bootstrap	PASS
2	Ruff lint	ruff check .	PASS (0 errors)
3	Ruff format	ruff format --check .	PASS (20 files clean)
4	Make lint	make lint	PASS
5	Test suite	make test	PASS (118 tests in 1.04s)
6	CLI version	hydradb --version	PASS (hydradb-cli 0.1.0)
7	Makefile venv guard	Run make lint without venv	PASS (clear error message)
8	CI YAML validity	yaml.safe_load on ci.yml	PASS
9	Issue template validity	yaml.safe_load on all templates	PASS

NOT Verified (requires GitHub infrastructure)

Item	Why
CI workflow execution	Requires GitHub Actions runner
DCO check on real PRs	Requires pull_request event trigger
CODEOWNERS auto-assignment	Requires @usecortex/hydradb-maintainers team
Issue/PR template rendering	Requires GitHub UI

---

License Inconsistency Note

hydradb-bench uses Apache 2.0 while hydradb-cli uses MIT. Apache 2.0 includes an explicit patent grant; MIT does not. If both repos are meant to be used together, having different licenses can confuse contributors. This is an org-level decision -- the LICENSE file was intentionally left unchanged in this PR.

---

Post-Merge: GitHub Admin Actions Checklist

After merging, a repository admin should complete these steps:

• 1. Set repository visibility to Public -- Settings > General > Danger Zone > Change visibility
• 2. Enable branch protection on main -- Settings > Branches > Add rule:
  • Require pull request reviews (1 reviewer minimum)
  • Require status checks to pass (lint, test)
  • Require linear history
• 3. Create the @usecortex/hydradb-maintainers team -- Organization Settings > Teams (if not already created for hydradb-bench)
• 4. Enable GitHub Discussions -- Settings > General > Features > Discussions
• 5. Configure repository topics -- Add: cli, hydradb, ai, memory, recall, python
• 6. Enable vulnerability alerts -- Settings > Code security > Dependabot alerts
• 7. Verify CI runs on this PR -- Check Actions tab for lint + test + dco-check
• 8. Add CI badge to README -- ![CI](https://github.com/usecortex/hydradb-cli/actions/workflows/ci.yml/badge.svg)
• 9. Decide on license alignment -- Both repos should use the same license (Apache 2.0 or MIT)

[promptless]

Promptless prepared a documentation update related to this change.

Triggered by PR #4 in usecortex/hydradb-cli

Added a "CLI Now Open Source" section to the changelog documenting the MIT license, DCO sign-off requirements, CI pipeline across Python 3.10-3.13, security policy, and issue/PR templates.

Review at https://app.gopromptless.ai/suggestions/35fff9af-e109-4dd6-8fc5-f846aa05b3ee