README with every K22-REPO-02 section and release verification steps; SECURITY with the security program's timelines and support policy; CONTRIBUTING with the exact CI commands; the threat model for this app shape; ADR-0001 adopting the reference architecture; RELEASING with the pending steps before the first release. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: James Maes <james@kof22.com>