.github/CODEOWNERS has no entry for CITATION.cff, SECURITY.md, CODE_OF_CONDUCT.md, LICENSE, and other top-level files

[yakew7]

Where: .github/CODEOWNERS.

The gap: several tracked top-level files have no CODEOWNERS entry at all, while their siblings do:

Repro:

$ for f in CITATION.cff SECURITY.md CODE_OF_CONDUCT.md AGENTS.md LICENSE llms.txt llms-full.txt explainer.html; do
    grep -q "^/$f " .github/CODEOWNERS && echo "$f: OWNED" || echo "$f: NO OWNER"
  done
CITATION.cff: NO OWNER
SECURITY.md: NO OWNER
CODE_OF_CONDUCT.md: NO OWNER
AGENTS.md: NO OWNER
LICENSE: NO OWNER
llms.txt: NO OWNER
llms-full.txt: NO OWNER
explainer.html: NO OWNER

while README.md, CHANGELOG.md, CONTRIBUTORS.md, METRICS.md, and ROADMAP.md all carry @yakew7 @Shreyash0712, and CLAUDE.md carries @yakew7. This is the same class of gap #340's follow-up fixed for those five docs - just for a different set of top-level files. tests/test_codeowners.py only asserts every CODEOWNERS pattern matches a real tracked file (the reverse direction); it never asserts every tracked top-level file has an owner, so this gap is currently unguarded by any test.

Why it matters: a PR touching CITATION.cff, SECURITY.md, CODE_OF_CONDUCT.md, or LICENSE gets no automatic review-request ping, unlike every comparable top-level doc.

Suggested fix: add these files under the existing "Top-level docs" / project-policy CODEOWNERS sections with the same owners as their siblings, and consider extending tests/test_codeowners.py to also assert coverage in the reverse direction for top-level files.