chore: add issue/PR templates and expand CONTRIBUTING.md for OSPO readiness

[Copilot]

OSPO readiness scan flagged missing issue/PR templates and thin contributing guidelines. This PR adds the required GitHub community health files.

Changes

• .github/ISSUE_TEMPLATE/bug_report.md — structured bug report template covering reproduction steps, expected/actual behavior, and environment details
• .github/ISSUE_TEMPLATE/feature_request.md — feature request template with problem statement, proposed solution, and alternatives sections
• .github/PULL_REQUEST_TEMPLATE.md — PR template with change-type categorization, test instructions, and a build verification checklist
• CONTRIBUTING.md — expanded with an issue reporting section (referencing the new templates) and a step-by-step PR process including branching conventions, review expectations, and a link to CODE_OF_CONDUCT.md

Out of scope

The following scan findings require admin/repository-settings access and cannot be addressed via code changes:

• BRANCH_PROTECTION — branch protection rules on main
• REPO_METADATA — repository description and topics
• SECRET_SCANNING / CODE_SCANNING — security feature enablement

Original prompt

---

This section details on the original issue you should resolve

<issue_title>OSPO Readiness Scan</issue_title>
<issue_description>> ⚠️ Experimental — automated first-pass review from the OSPO readiness scanner.

🛡️ OSPO Readiness Scan — github/java-codespaces

8 items to address before release. 13 pass · 5 partial · 3 need attention

🔴 Needs attention

• TEMPLATES: No issue or PR templates found in .github/
• BRANCH_PROTECTION: Default branch 'main' has no branch protection rules
• REPO_METADATA: No description or topics set — add both for discoverability

🟡 Should improve

• CONTRIBUTING: Found CONTRIBUTING.md (repo) but limited content — consider adding PR process, issue reporting guidelines (template)
• DEPENDENCIES: No supported package manifest found — skipped deep dependency scan
• SECRET_SCANNING: Security settings not available — requires write/admin access to the repo
• CODE_SCANNING: Unable to check code scanning — requires security admin access

💡 Optional

• SPDX_HEADERS: No source files found to check for SPDX headers (optional)

📊 4 dependencies

📋 Policy compliance (github/licensecheck-data)
✅ 0 allowed · ❓ 4 unknown

⚠️ 4 dependencies with undetected licenses

These licenses couldn't be automatically detected. They likely have valid licenses — verify on their repository pages.

Package	Version
maven-jar-plugin	3.5.0
maven-compiler-plugin	3.15.0
actions/setup-java	5..
actions/checkout	6..

📥 View dependency graph · View SBOM

✅ 13/21 checks pass

LICENSE, README, SECURITY, CODE_OF_CONDUCT, CI_CD, CODEOWNERS, SUPPORT, SENSITIVE_CONTENT, NOTICE, DEPENDABOT, INCLUSIVE_LANGUAGE, TRADEMARKS, LICENSE_POLICY

📌 Once all items above are addressed, add the ospo-review label to request a final review from the OSPO team.

🤖 Auto-scanned by ospo-readiness. Re-run by adding the rescan label.

Originally posted by @ashleywolf in #665</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes OSPO Readiness Scan #1

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[Copilot]

Pull request overview

Adds GitHub community health files and expands contribution guidance to satisfy OSPO readiness scan requirements for this repository.

Changes:

• Add GitHub Issue templates for bug reports and feature requests.
• Add a GitHub Pull Request template with testing and checklist prompts.
• Expand CONTRIBUTING.md with issue reporting guidance and a clearer PR process.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
CONTRIBUTING.md	Expands contributor guidance with issue reporting, PR workflow steps, and Code of Conduct link.
.github/PULL_REQUEST_TEMPLATE.md	Introduces a PR template to standardize descriptions, testing instructions, and verification checklist.
.github/ISSUE_TEMPLATE/feature_request.md	Adds a structured feature request template with problem/solution/alternatives sections.
.github/ISSUE_TEMPLATE/bug_report.md	Adds a structured bug report template with repro, expected/actual behavior, and environment details.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.