仓库自动化与社区基建：Dependabot / CodeQL / issue 模板 / CONTRIBUTING

[CSJ608]

内容

• Dependabot：NuGet 与 GitHub Actions 每周检查，minor/patch 合并成一个 PR（build 前缀提交）
• CodeQL：codeql.yml（C#，push/PR 到 main + 每周一全量；非必需检查，不阻塞合并）
• issue 表单模板：Bug 报告（版本/运行环境/日志与 FrameError 引导）、功能建议（先讲场景再讲 API）
• CONTRIBUTING.md：指向 AGENTS.md 的标准流程与本地验证命令
• Discussions 已在仓库设置开启（gh repo edit）

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.