chore: adopt engineering standard v1.0.0

Adopt the org engineering standard (its-consulting/standards @ v1.0.0).

Adds baseline governance/CI/policy files rendered from the standard's
templates and pins .standards-version=1.0.0. Vendored OPA/Rego policies
under .standards/policies/ so CI runs the gate locally (no cross-repo dep).
Placeholders ({{ORG}}/{{REPO}}/{{OWNER_HANDLE}}/{{MAINTAINER_EMAIL}}) filled in.
Existing files that differ were left untouched by the adopter.

Automated rollout. Files created: 15.

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,52 @@
+---
+name: Bug report
+about: Report something that is broken or behaves incorrectly
+title: "bug: <short summary>"
+labels: [bug, triage]
+assignees: []
+---
+
+<!--
+Rendered into <repo>/.github/ISSUE_TEMPLATE/ by adopt-standard.sh.
+SECURITY: do NOT paste secrets, private keys, tokens, or production hostnames.
+If this is a security vulnerability, do NOT file a public issue — see SECURITY.md.
+-->
+
+## Summary
+
+<!-- One sentence: what is wrong? -->
+
+## Steps to reproduce
+
+1.
+2.
+3.
+
+## Expected behaviour
+
+<!-- What you expected to happen. -->
+
+## Actual behaviour
+
+<!-- What actually happened. Include error output (redact any secrets). -->
+
+```text
+
+```
+
+## Environment
+
+- Repo version / commit:
+- Adopted standard version (`.standards-version`):
+- OS / runtime:
+- CI or local:
+
+## Impact
+
+- [ ] Blocks work / production
+- [ ] Workaround exists
+- [ ] Cosmetic / minor
+
+## Additional context
+
+<!-- Links, screenshots (no secrets), related issues. -->