Include SECURITY.md for private vulnerability reporting; fix CONTRIBUTING upstream URL. Co-authored-by: Cursor <cursoragent@cursor.com>
Document fork/PR workflow for external contributors; add bug and feature issue templates. Co-authored-by: Cursor <cursoragent@cursor.com>