chore: add the governance issue forms - #3

1 finding — 1 inline, 0 deferred, 0 out of scope.

All four files reviewed. config.yml is valid and complete (blank_issues_enabled plus three well-formed https contact_links, no issues). The three form templates are schema-conformant GitHub issue forms with correctly-placed required validations; SAST found nothing; no code/security/secret/dependency concerns. Only finding is the P2 note that the type: issue-type values (Epic/Story/Task) require those custom issue types to be configured in the org, else the type is silently ignored.