Add governance docs and support policy files

Author: alexphillips-dev

.github/CODEOWNERS

@@ -0,0 +1,10 @@
+# Default ownership
+* @alexphillips-dev
+
+# Critical paths
+/.github/ @alexphillips-dev
+/scripts/ @alexphillips-dev
+/src/ @alexphillips-dev
+/tests/ @alexphillips-dev
+/folderview.plus.plg @alexphillips-dev
+/folderview.plus.xml @alexphillips-dev

CONTRIBUTING.md

@@ -0,0 +1,61 @@
+# Contributing to FolderView Plus
+
+Thanks for helping improve FolderView Plus.
+
+## Before You Start
+
+- Search existing issues first:
+  - Bugs: `Bug report` form
+  - Features: `Feature request` form
+  - Help: `Support / troubleshooting` form
+- Keep changes focused and scoped to one problem per pull request.
+
+## Local Setup
+
+1. Fork and clone the repository.
+2. Create a branch from `main`.
+3. Install required tools:
+   - Node.js 20+
+   - PHP
+   - Bash + shellcheck
+
+## Validation Checklist
+
+Run these before opening a pull request:
+
+```bash
+node --test tests/*.mjs
+bash scripts/release_guard.sh
+bash scripts/install_smoke.sh
+bash scripts/api_contract_guard.sh
+bash scripts/i18n_guard.sh
+bash scripts/lang_usage_guard.sh
+bash scripts/theme_scope_guard.sh
+bash scripts/perf_budget_guard.sh
+```
+
+If testing against an Unraid box is available, also run:
+
+```bash
+bash scripts/unraid_matrix_smoke.sh
+```
+
+## Pull Request Expectations
+
+- Include a clear summary of what changed and why.
+- Include screenshots for UI changes (desktop and mobile when relevant).
+- Update docs (`README.md`, `CHANGELOG-fixes.md`, or language files) when behavior changes.
+- Keep backwards compatibility unless the change is intentional and documented.
+
+## Coding Standards
+
+- Use ASCII unless a file already requires Unicode.
+- Keep naming and structure consistent with existing plugin files.
+- Prefer small, composable functions over large inline blocks.
+- Avoid introducing theme-breaking global selectors.
+
+## Release and Versioning
+
+- Version format: `YYYY.MM.DD.UU`
+- `UU` is zero-padded for stable Unraid update ordering.
+- Releases are prepared with `bash scripts/release_prepare.sh`.

SECURITY.md

@@ -0,0 +1,44 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+| --- | --- |
+| `main` (current development) | yes |
+| Latest tagged release | yes |
+| Older releases | no |
+
+## Reporting a Vulnerability
+
+Please report security issues privately through GitHub Security Advisories:
+
+1. Go to the repository `Security` tab.
+2. Select `Report a vulnerability`.
+3. Include:
+   - affected version (`/boot/config/plugins/folderview.plus/version`)
+   - Unraid version
+   - reproduction steps
+   - impact and expected risk
+   - logs/screenshots if available
+
+Do not open public issues for unpatched vulnerabilities.
+
+## Response Targets
+
+- Initial acknowledgement: within 72 hours
+- Triage and severity assessment: within 7 days
+- Fix or mitigation timeline: communicated after triage
+
+## Security Scope
+
+In-scope components include:
+
+- plugin PHP API endpoints
+- client-side settings/runtime scripts
+- import/export and backup/restore flows
+- release packaging and update metadata
+
+Out-of-scope:
+
+- Unraid core vulnerabilities
+- third-party plugins/themes outside this repository

SUPPORT.md

@@ -0,0 +1,40 @@
+# Support
+
+Use the right channel so issues are handled quickly.
+
+## Bug Reports
+
+Open a GitHub issue using the `Bug report` form:
+
+- https://github.com/alexphillips-dev/FolderView-Plus/issues/new/choose
+
+Include:
+
+- Unraid version
+- plugin version (`/boot/config/plugins/folderview.plus/version`)
+- clear reproduction steps
+- expected vs actual result
+- relevant screenshots/logs
+
+## Feature Requests
+
+Open a GitHub issue using the `Feature request` form:
+
+- https://github.com/alexphillips-dev/FolderView-Plus/issues/new/choose
+
+## Troubleshooting / Usage Help
+
+Use the `Support / troubleshooting` issue form first:
+
+- https://github.com/alexphillips-dev/FolderView-Plus/issues/new/choose
+
+Community support thread:
+
+- https://forums.unraid.net/topic/197631-plugin-folderview-plus/
+
+## Security Reports
+
+Do not post security vulnerabilities publicly.  
+Report privately via the repository `Security` tab:
+
+- https://github.com/alexphillips-dev/FolderView-Plus/security