docs: expand contributor guide and templates

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,82 @@
+name: Bug report
+description: Report a reproducible problem in the app, API, or contracts.
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug. Please include enough detail for a maintainer to reproduce it locally.
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What went wrong?
+      placeholder: A concise description of the bug.
+    validations:
+      required: true
+  - type: dropdown
+    id: area
+    attributes:
+      label: Affected area
+      options:
+        - Frontend
+        - Backend
+        - Contracts
+        - Supabase
+        - Documentation
+        - Other
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: List the exact actions, commands, or API calls that trigger the issue.
+      placeholder: |
+        1. Run ...
+        2. Open ...
+        3. Observe ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      placeholder: What should have happened?
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      placeholder: What happened instead?
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Include versions and relevant local setup details.
+      placeholder: |
+        OS:
+        Node:
+        npm:
+        Rust:
+        Stellar CLI:
+        Supabase CLI:
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs or screenshots
+      description: Paste relevant logs or screenshots. Redact secrets and private keys.
+      render: shell
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Pre-submit checks
+      options:
+        - label: I searched existing issues and did not find a duplicate.
+          required: true
+        - label: I removed or redacted secrets, private keys, and wallet seed phrases.
+          required: true

.github/ISSUE_TEMPLATE/contract_issue.yml

@@ -0,0 +1,68 @@
+name: Contract issue
+description: Report or propose a change that affects Soroban contract behavior.
+title: "[Contract]: "
+labels: ["contract"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Contract issues can affect escrowed funds and security guarantees. Include precise function and invariant details.
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      placeholder: Briefly describe the contract concern.
+    validations:
+      required: true
+  - type: input
+    id: contract
+    attributes:
+      label: Contract or module
+      placeholder: contracts/secureflow/src/...
+    validations:
+      required: true
+  - type: textarea
+    id: functions
+    attributes:
+      label: Affected function(s)
+      description: Name the public entrypoints, helpers, or storage paths involved.
+      placeholder: |
+        - create_contract
+        - release_milestone
+    validations:
+      required: true
+  - type: textarea
+    id: security
+    attributes:
+      label: Security implications
+      description: Could this affect funds, authorization, state integrity, replay resistance, or privacy?
+      placeholder: Describe the worst credible impact and affected actors.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected invariant or behavior
+      placeholder: What property should always hold?
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction or test idea
+      placeholder: Provide a failing test case, transaction sequence, or command.
+  - type: textarea
+    id: validation
+    attributes:
+      label: Suggested validation
+      placeholder: |
+        cargo fmt --all --check
+        cargo clippy --workspace --all-targets -- -D warnings
+        cargo test --workspace
+  - type: checkboxes
+    id: disclosure
+    attributes:
+      label: Disclosure
+      options:
+        - label: This issue does not include secrets, private keys, wallet seed phrases, or exploitable private data.
+          required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,66 @@
+name: Feature request
+description: Suggest a product, developer experience, or platform improvement.
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this template for scoped enhancements. Larger architectural proposals should include rollout and testing notes.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user or developer problem does this solve?
+      placeholder: Describe the pain point or missing workflow.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What should change?
+      placeholder: Describe the desired behavior or API.
+    validations:
+      required: true
+  - type: dropdown
+    id: area
+    attributes:
+      label: Affected area
+      options:
+        - Frontend
+        - Backend
+        - Contracts
+        - Supabase
+        - Documentation
+        - Developer experience
+        - Other
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      placeholder: Note any simpler alternatives or tradeoffs.
+  - type: textarea
+    id: acceptance
+    attributes:
+      label: Acceptance criteria
+      description: How will maintainers know this is done?
+      placeholder: |
+        - [ ] ...
+        - [ ] ...
+    validations:
+      required: true
+  - type: textarea
+    id: validation
+    attributes:
+      label: Suggested validation
+      placeholder: Commands, tests, or manual checks that should pass.
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Pre-submit checks
+      options:
+        - label: I searched existing issues and did not find a duplicate.
+          required: true

.github/pull_request_template.md

@@ -0,0 +1,32 @@
+## Summary
+
+- 
+
+## Why
+
+Explain the reason for the change and link the issue.
+
+Closes #
+
+## Test evidence
+
+List the exact commands you ran and their results.
+
+```bash
+# example
+npm run lint
+```
+
+## Risk and rollout
+
+- Risk level:
+- Rollout notes:
+- Follow-up work:
+
+## Checklist
+
+- [ ] I kept this PR focused on one issue or feature.
+- [ ] I added or updated tests for behavior changes, or explained why not.
+- [ ] I updated docs for setup, route, migration, contract, or environment changes.
+- [ ] I ran the smallest relevant validation commands and included them above.
+- [ ] I checked that no secrets, private keys, wallet seed phrases, or `.env` files are committed.