release: promote T4 Code 0.1.31 candidate

.github/CODEOWNERS

@@ -0,0 +1,9 @@
+# Changes to governance, automation, releases, signing, and provenance require
+# explicit owner review even after additional maintainers are added.
+/.github/ @wolfiesch
+/GOVERNANCE.md @wolfiesch
+/LICENSE @wolfiesch
+/THIRD_PARTY_NOTICES.md @wolfiesch
+/infra/ @wolfiesch
+/scripts/*package* @wolfiesch
+/scripts/*release* @wolfiesch

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,16 +1,17 @@
 name: Bug report
-description: Something in T4 Code is broken or behaves wrong.
+description: Something in Omperator is broken or behaves incorrectly.
 labels: ["bug"]
 body:
   - type: markdown
     attributes:
       value: |
-        Security problem? **Stop. Do not file a public issue.** Follow [SECURITY.md](https://github.com/LycaonLLC/t4-code/blob/main/SECURITY.md) instead.
+        Security problem? **Stop. Do not file a public issue.** Follow [SECURITY.md](https://github.com/wolfiesch/omperator/blob/main/SECURITY.md) instead.
   - type: input
     id: version
     attributes:
-      label: T4 Code version
-      placeholder: "0.1.30"
+      label: Omperator version
+      description: Use the displayed T4 Code version while the application rebrand is in progress.
+      placeholder: "0.1.31"
     validations:
       required: true
   - type: dropdown

.github/ISSUE_TEMPLATE/config.yml

@@ -1,8 +1,8 @@
 blank_issues_enabled: false
 contact_links:
   - name: Security vulnerability (private)
-    url: https://github.com/LycaonLLC/t4-code/security/advisories/new
+    url: https://github.com/wolfiesch/omperator/security/advisories/new
     about: Never report security problems in a public issue. Use GitHub private vulnerability reporting.
   - name: Documentation
-    url: https://t4code.net/docs
-    about: Install, first run, and usage docs.
+    url: https://github.com/wolfiesch/omperator#readme
+    about: Current installation, development, and product documentation.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,5 +1,5 @@
 name: Feature request
-description: Suggest something T4 Code should do.
+description: Suggest something Omperator should do.
 labels: ["enhancement"]
 body:
   - type: textarea

.github/ISSUE_TEMPLATE/question.yml

@@ -0,0 +1,32 @@
+name: Question
+description: Ask about installing, configuring, or using Omperator.
+labels: ["question"]
+body:
+  - type: textarea
+    id: goal
+    attributes:
+      label: What are you trying to do?
+      description: Describe the outcome you want, not only the command or screen you are using.
+    validations:
+      required: true
+  - type: textarea
+    id: attempted
+    attributes:
+      label: What have you tried?
+      description: Include relevant commands or screenshots after removing secrets and private paths.
+  - type: input
+    id: version
+    attributes:
+      label: Omperator version
+      description: Use the displayed T4 Code version while the application rebrand is in progress.
+      placeholder: "0.1.31"
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform
+      options:
+        - macOS Apple Silicon
+        - Linux x86_64
+        - Android
+        - Built from source
+        - Other

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,6 +1,10 @@
 ## What this changes
 
-<!-- One change per PR. Say what it does and why. -->
+<!-- Describe one coherent outcome and why it matters. -->
+
+## Risk and rollout
+
+<!-- Note compatibility, migration, release, security, or rollback concerns. Write "None" when genuinely none. -->
 
 ## How you verified it
 
@@ -10,5 +14,6 @@
 
 - [ ] `pnpm check` passes (release contract, provenance, lint, typecheck)
 - [ ] `pnpm test` passes; new behavior has a test that fails without this change
+- [ ] User-facing or architectural changes update the relevant docs, ADR, or release notes
 - [ ] Any pasted logs or screenshots are redacted: no secrets, tokens, pairing codes, or private paths
 - [ ] Ported code (T3 Code / OMP) follows the provenance rules in `THIRD_PARTY_NOTICES.md`

.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Los_Angeles
+    # Keep security updates enabled while the inherited dependency baseline is
+    # repaired deliberately. GitHub applies a separate PR limit to security
+    # updates, so zero disables only scheduled version-update PRs.
+    open-pull-requests-limit: 0
+    commit-message:
+      prefix: "chore(deps)"
+
+  - package-ecosystem: gomod
+    directory: /packages/cluster-operator
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:15"
+      timezone: America/Los_Angeles
+    open-pull-requests-limit: 0
+    commit-message:
+      prefix: "chore(deps-go)"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:30"
+      timezone: America/Los_Angeles
+    open-pull-requests-limit: 0
+    commit-message:
+      prefix: "chore(actions)"

.github/labels.json

@@ -0,0 +1,18 @@
+[
+  { "name": "proposal", "color": "5319e7", "description": "A product or architecture decision that needs review" },
+  { "name": "triaged", "color": "0e8a16", "description": "Scope and next action have been confirmed" },
+  { "name": "needs-info", "color": "fbca04", "description": "More information is required before work can continue" },
+  { "name": "prio:p0", "color": "b60205", "description": "Critical: release, security, or severe user impact" },
+  { "name": "prio:p1", "color": "d93f0b", "description": "High: significant impact and near-term work" },
+  { "name": "prio:p2", "color": "fbca04", "description": "Medium: important but not urgent" },
+  { "name": "prio:p3", "color": "0e8a16", "description": "Low: minor impact or backlog" },
+  { "name": "platform:macos", "color": "e99695", "description": "macOS-specific behavior" },
+  { "name": "platform:linux", "color": "e99695", "description": "Linux-specific behavior" },
+  { "name": "platform:android", "color": "e99695", "description": "Android-specific behavior" },
+  { "name": "area:desktop", "color": "0052cc", "description": "Electron desktop application" },
+  { "name": "area:host", "color": "0052cc", "description": "Host service, protocol, or OMP integration" },
+  { "name": "area:cluster", "color": "0052cc", "description": "Cluster operator or multi-host orchestration" },
+  { "name": "area:release", "color": "0052cc", "description": "Packaging, signing, publication, or updates" },
+  { "name": "dependencies", "color": "0366d6", "description": "Dependency and supply-chain updates" },
+  { "name": "security", "color": "b60205", "description": "Security-sensitive work; do not disclose vulnerabilities publicly" }
+]