Add CONTRIBUTING/CODE_OF_CONDUCT/SECURITY + first tag

[next-nf]

Add the three governance files (AGPL-3.0 repo); cut the first official semver tag (currently only a dev tag).
Accept: three files present; tag pushed; CI green.

Epic: next-nf/next-nf#16