[dDevAhmed]

Summary

Implements CLI-015 by documenting the exact intended GitHub repository ruleset for the main branch and linking it from contributor guidance.

Included

• docs/contributing/repository-ruleset.md
• pull-request requirement and minimum review policy
• mandatory CODEOWNERS enforcement expectation
• stale-approval dismissal and conversation-resolution requirements
• required status checks mapped to current real job names
• force-push/deletion protections for main
• narrow, auditable emergency bypass guidance
• merge-method guidance
• maintainer configuration checklist
• CONTRIBUTING link to the ruleset source of truth

Required checks

The document requires only checks that currently exist and run on pull requests:

• Quality
• CodeQL

Dependency Review is explicitly deferred until GitHub Dependency Graph is enabled, the workflow is merged, and a representative PR proves the check healthy. OpenSSF Scorecard is explicitly not a required PR check because it runs only in trusted main/scheduled contexts.

Current repository state

The GitHub rulesets API currently returns no configured rulesets for this repository, so this PR documents the intended administrative configuration without falsely claiming enforcement already exists.

Security

• no workflow or runtime code changes
• no weakening of current checks
• no nonexistent or scheduled-only check is required
• code-owner enforcement remains separate from advisory CODEOWNERS routing

Closes #18