docs: reconcile organization governance and maturity

[jaavid]

Summary

Reconcile CoreLink organization-wide documentation with the current 13 active repositories and shared maturity model.

Changes

• replace empty Code of Conduct with a real conduct/enforcement baseline
• fix Security policy and private vulnerability-reporting guidance without inventing an email address
• add Support and Release policies
• reconcile Contributing repository responsibilities, including Console
• update repository maturity inventory to 13 active repositories
• record Console as the canonical existing frontend repository and documented naming exception
• remove stale standalone examples assumptions
• refresh organization profile and community-health index

Source-of-truth model

• .github: governance/maturity/security/support/release policy
• product-planning: product hierarchy and acceptance decisions
• api-contracts: normative machine-readable contracts
• developer-docs: human developer guidance
• owning repositories: implementation/deployment specifics

This is documentation/governance reconciliation only; it does not promote Alpha/Scaffold capabilities to Stable.