Add CI workflow, Dependabot config, issue/PR templates

[Arun Sekhar (achandmsft)]

Pull Request #6: CI workflow + Dependabot + issue/PR templates

What

Adds the validation surface area the repo needs before going public:

• .github/workflows/validate.yml — runs on every PR + push to main. Four jobs in parallel:
  • bicep — installs Bicep CLI, runs bicep build + bicep lint on both main.bicep and foundry.bicep.
  • terraform — terraform fmt -check -recursive, init -backend=false, and validate on infra-terraform/infra/.
  • python — installs requirements.txt and byte-compiles every sample script in src/.
  • shell — shellcheck --severity=error on all *.sh (resolved via git ls-files) and PSScriptAnalyzer Error-level scan on all *.ps1.
• .github/dependabot.yml — weekly dependency PRs for pip (root), GitHub Actions, and Terraform providers in infra-terraform/infra/. Each ecosystem capped at 5 open PRs with scoped labels and commit prefixes.
• .github/ISSUE_TEMPLATE/bug_report.yml — structured bug-report form with required IaC variant / region / model / tool-versions / repro / expected / actual fields, plus required confirmations (searched duplicates, redacted IDs).
• .github/ISSUE_TEMPLATE/feature_request.yml — problem / solution / alternatives / scope.
• .github/ISSUE_TEMPLATE/config.yml — disables blank issues and pins three contact links (MSRC, Foundry docs, Claude SDK docs).
• .github/PULL_REQUEST_TEMPLATE.md — what / why / how / verification checklist with the IaC-parity and no-secrets reminders.

Drive-by fix in this PR

• terraform fmt -recursive on infra-terraform/infra/main.tf — a few local blocks had misaligned = columns from an older edit. Pure whitespace, no semantic change. Verified terraform validate still passes.

Verification

Ran each CI step locally against the current tree:

Step	Result
terraform fmt -check -recursive	✅ exit 0 after the fmt fix in this PR
bicep build main.bicep + foundry.bicep	✅ exit 0 (3× BCP037 modelProviderData warnings — known type-metadata gap; the property is real and supported by the Cognitive Services RP)
python -m compileall -q src/	✅ exit 0
PSScriptAnalyzer Error-level on all *.ps1	✅ no error-level findings
shellcheck	Not installed locally; will run in CI. Severity is error so cosmetic warnings won't break the build.

Non-changes

• No README changes.
• No new dependencies pulled into the runtime path.
• No source / IaC changes other than the cosmetic tf fmt pass.
• Repo metadata (visibility, description, topics, homepage, delete-branch-on-merge) was already set via the API in parallel with this PR.

Follow-ups (out of scope for this PR)

• awesome-azd listing PR to Azure/awesome-azd.
• Optional markdownlint-cli2 step on README + community files once we settle on a style config.