Add project guidance, security/governance/hygiene rules, and product wiki
- CLAUDE.md + AGENTS.md: canonical guiding principles for AI agents and
developers (tenant isolation, no RLS, stack, security, conventions,
environment gotchas)
- SECURITY.md: required security controls (isolation, secrets, auth,
input handling, least privilege) with VAPT status
- GOVERNANCE.md: how changes are validated before merge — deterministic
gates + AI review, risk tiers, human accountability
- CONTRIBUTING.md: code hygiene, definition of done, file hygiene
- docs/wiki/: product reference (overview, domain model, features,
roles & access, API reference, glossary)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>