Add required open source project files

[mssalemi]

Addresses: https://github.com/shop/issues-shopifyvm/issues/235

Followed section 2.5 in vault docs for making a repo public, this PR adds the following suggested files for making a repository public at Shopify:

Done

• Add required files:
  • add README.md
  • add CONTRIBUTING.md -> I didn't see requirements for this in the docs
  • add CODE_OF_CONDUCT.md file -> same as function-runner
  • add License.md -> copied from vault
  • add CLA workflow -> copied from vault

WIP

• Documentation
  • Ensure README.md is comprehensive (2.8)

[TODO] before making repo public

• Verify CLA
  • todo: after this merges. Settings > Code and automation > Branches and change default branch protection rules for CLA to be a required status check. (Step 2.5)
  • verify at https://github.com/Shopify/shopify-cla-action
    • note: check it shows on PR's, it looks like a status check
• Code Hygiene (2.6)
  • Verify no Shopify platform info is exposed (except for examples)
• Branch Protection (2.9)
  • Set up branch protection rules for main branch
  • Configure codeowner reviews
  • https://shopify.slack.com/archives/C08B8KXPAQZ/p1745952085774489?thread_ts=1745951497.483349&cid=C08B8KXPAQZ
• Project Listing (2.10)
  • ensure project listed in Shopify open source directory
  • small PR adding shopify-function-wasm-api here
  • [ShopifyVM] add shopify-function-wasm-api public repo shopify.github.com#127
• Stewardship (2.4)
  • ensure project maintainers
  • project in ServicesDB
  • https://services.shopify.io/services/shopify-function-wasm-api

[caution-tape-bot]

👋 It seems that this PR is adding, or editing, a GitHub Action workflow that is not configured to use our custom GitHub Action runners.

For private repositories, the only supported way of running Action workflows is via the custom runners. You can learn more about the supported use cases in our GitHub Actions documentation.

To make sure that your workflow is using these runners you need to add the shopify-ubuntu-latest label to your workflow manifest file, or shopify-core-ubuntu-latest for Core repositories:

runs-on: shopify-ubuntu-latest

If your repository is intended to become Public later, please use runs-on: shopify-ubuntu-latest for now. The custom runners should function the same as ubuntu-latest public runners, though the exact Ubuntu version may vary. Please see the section below for more information about OS selection on premium runners.

If you run into any issues with the custom runners, please reach out in help-eng-infrastructure on Discourse.

Note for OS Versions

The shopify-ubuntu-latest runners can select from two different runner pools, which contain both Ubuntu 20.04 and Ubuntu 22.04 machines. For some workflows, this can cause issues.

To use Ubuntu 20.04 only, you can specify runs-on: shopify-ubuntu-20.04.

To use Ubuntu 22.04 only, you can specify runs-on: shopify-ubuntu-latest-2.

---

This comment was added by the GitHubActions::Workflow Caution Tape Bot rule.
View the source of this rule in Services DB

[adampetro]

Let's squash down the commits before merging

[mssalemi]

Will merge this and go through the action items listed above this afternoon.