Complete the GitHub repository foundation

[aaron-for-value]

Problem

VeriRun needs a complete, auditable GitHub operating baseline before executable releases.

Scope

• Keep labels and milestones aligned with ROADMAP.md.
• Add repository rulesets after CI exists.
• Create the VeriRun Roadmap Project Board when the required token scope is available.
• Document versioning, compatibility, and release evidence policy.
• Verify private vulnerability reporting and community health files.

Non-scope

• v0.1 runtime implementation.
• Artificial milestone due dates.

Acceptance evidence

• GitHub repository metadata and community profile are reviewed.
• Required checks protect main after CI is available.
• Remaining Foundation exceptions are explicit and linked from ROADMAP.md.