Harden conversation surface against external interaction

[Brad-Edwards]

The repository's issue, pull-request, and discussion surfaces shall accept input only from vetted authors. Mechanism details — scope, lifetime, enforcement layer — are operational and not recorded here.

Scope

• Add ADR capturing the policy.