Align repository structure with NemoClaw

[pastorsj]

Summary

Aligns NemoClaw Community’s public repository structure with the main NemoClaw repository so the project has the same core contribution, security, license, and governance shape.

Changes

• Align Apache-2.0 license appendix with NemoClaw.
• Update security policy to match NVIDIA/NemoClaw disclosure guidance.
• Replace code of conduct with the NemoClaw Contributor Covenant format.
• Align issue template filenames and structure with NemoClaw.
• Align DCO workflow with NemoClaw’s PR-body Signed-off-by check.
• Add .editorconfig and scripts/check-spdx-headers.sh.
• Update license-check workflow to use the SPDX wrapper.

Verification

• python scripts/check_license_headers.py --check
• bash scripts/check-spdx-headers.sh
• git diff --check origin/main..HEAD
• Relevant example setup, syntax, or smoke checks
• Documentation updated for user-facing behavior changes

Release And Compliance

• No secrets, local .env files, private certificates, snapshots, or token caches are included.
• Third-party dependency changes are reflected in THIRD-PARTY-NOTICES.
• Public documentation is free of internal-only links or private workspace details.

---

Signed-off-by: Sam Pastoriza spastoriza@nvidia.com