chore: prepare v0.1.0 release bootstrap

Add SECURITY.md, CODEOWNERS, pin Python version in CI, and add
build/style hidden sections to release-please config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ZviBaratz

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+* @ZviBaratz
+rules/patterns.yaml @ZviBaratz
+skills/ego-lint/scripts/ @ZviBaratz

.github/workflows/test.yml

@@ -5,5 +5,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.x'
       - name: Run tests
         run: bash tests/run-tests.sh

SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please report it by
+[opening a private security advisory](https://github.com/ZviBaratz/gnome-extension-reviewer/security/advisories/new)
+on GitHub.
+
+Do not open a public issue for security vulnerabilities.
+
+## Scope
+
+ego-lint processes untrusted extension code. Vulnerabilities include:
+- Command injection via crafted filenames or metadata
+- Path traversal in file-processing scripts
+- Regex denial of service (ReDoS) in pattern rules

release-please-config.json

@@ -21,6 +21,8 @@
         {"type": "refactor", "section": "Refactoring"},
         {"type": "perf", "section": "Performance"},
         {"type": "ci", "section": "CI", "hidden": true},
+        {"type": "build", "section": "Build System", "hidden": true},
+        {"type": "style", "section": "Style", "hidden": true},
         {"type": "chore", "section": "Miscellaneous", "hidden": true}
       ]
     }