Add security workflows, comprehensive guides, and enhanced documentation

[Copilot]

Enhances repository security posture, documentation quality, and contributor experience through automated workflows and comprehensive guides.

Security Enhancements

• Automated dependency review - Blocks PRs introducing vulnerable dependencies (moderate+ severity), denies GPL licenses
• Security scanning workflow - Trivy + Gitleaks on all PRs, uploads to Security tab
• Enhanced CodeQL - Added security-extended and security-and-quality query suites
• Improved .gitignore - Prevents commits of keys, certificates, cloud credentials, database files

Documentation

New Guides (50k+ words total)

• QUICKSTART.md - Installation, project structure, common commands, troubleshooting
• FIRST_TIME_CONTRIBUTORS.md - Step-by-step contribution workflow, setup, issue claiming
• PERFORMANCE.md - Frontend/backend optimization, database indexing, caching strategies, monitoring
• DEPLOYMENT_CHECKLIST.md - Pre-deployment security, infrastructure, monitoring, DR procedures
• CODE_REVIEW_GUIDE.md - Review principles, security/performance checks, feedback patterns
• API_SECURITY.md - Auth/authz patterns, input validation, rate limiting, OWASP practices

Enhanced Files

• README.md - Added CI/TypeScript/Node badges, quick start, troubleshooting, key features, security showcase, contributor recognition
• SECURITY.md - Vulnerability reporting guidelines, response timelines, user best practices
• CONTRIBUTING.md - 8-step contribution workflow, security-conscious development section
• PR Template - Added description/motivation/testing sections, security checklist

Workflow Improvements

• Enhanced PR template with structured sections and security checklist
• All changes additive, zero breaking changes
• Follows existing repository patterns and standards

Example security workflow trigger:

on:
  pull_request:
    branches: [master]
    paths:
      - '**.ts'
      - '**.json'
      - 'package.json'
      - 'yarn.lock'

Original prompt

Lets enhance this repo , secure it , advance it to one step , enhance the readme's , code , workflows , and other things hich will help the repo a lot and help me gain some popularity

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.