Address OSPO readiness scanner findings (#3)

* Add dependabot config, issue/PR templates, and license section in README

Address OSPO readiness scanner findings:
- Add .github/dependabot.yml for npm and GitHub Actions
- Add bug report and feature request issue templates
- Add pull request template
- Add License section to README

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Fix README.md — restore full content and add License section

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: 3 people

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,35 @@
+name: Bug report
+description: Report a problem with TUIKit
+labels: ["bug"]
+body:
+  - type: textarea
+    attributes:
+      label: Describe the bug
+      description: A clear description of what the bug is.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Steps to reproduce
+      description: Steps to reproduce the behavior.
+      placeholder: |
+        1. Run command ...
+        2. See error ...
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Expected behavior
+      description: What you expected to happen.
+    validations:
+      required: true
+  - type: input
+    attributes:
+      label: TUIKit version or commit
+      description: Which version or commit SHA are you using?
+    validations:
+      required: false
+  - type: textarea
+    attributes:
+      label: Additional context
+      description: Any other context, screenshots, or logs.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,22 @@
+name: Feature request
+description: Suggest an idea for TUIKit
+labels: ["enhancement"]
+body:
+  - type: textarea
+    attributes:
+      label: Describe the feature
+      description: A clear description of what you would like to happen.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Use case
+      description: What problem does this solve? Why is this needed?
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or features you have considered.
+    validations:
+      required: false

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "bun"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/pull_request_template.md

@@ -0,0 +1,17 @@
+## Summary
+
+<!-- Brief description of what this PR does -->
+
+## Changes
+
+<!-- List the key changes -->
+
+## Testing
+
+<!-- How was this tested? -->
+
+## Checklist
+
+- [ ] Specs lint passes (`bun run lint`)
+- [ ] Tests updated if applicable
+- [ ] Documentation updated if applicable

README.md

@@ -300,3 +300,7 @@ The GitHub Actions workflow (`.github/workflows/specs-ci.yml`) runs on every PR:
 For TUI design foundations — color systems, typography, iconography, layout
 grids, accessibility patterns, keybinding conventions, and buffer management —
 see [`docs/foundations.md`](docs/foundations.md).
+
+## License
+
+This project is licensed under the [MIT License](LICENSE).