chore: restore repository policies and update refactor notices

[aidandaly24]

Description

Restore repository policy, legal, and contribution-template files from main at 805f3420e2069e83694ba12ef447d8495b883aef, with focused updates for the refactor:

• Keep NOTICE in its original concise attribution-list format. Update current dependency entries, remove unused entries, and add short InkUI and Bun attributions. No generated dependency inventory or full license-text bundle.
• Update the PR template to use the current Bun test, typecheck, lint, format, build, and snapshot commands.
• Change only the product name in SECURITY.md from Bedrock AgentCore CLI Starter Toolkit to AgentCore CLI. Keep all reporting instructions, contact information, and policy commitments unchanged from main.
• Format the copied bug-report and feature-request YAML files to satisfy the repository Prettier settings. Only three quote styles change; fields and behavior stay the same.

LICENSE, CODE_OF_CONDUCT.md, and .github/ISSUE_TEMPLATE/config.yml remain exact copies from main.

No changelog, Dependabot configuration, workflows, package metadata, or application code changes are included.

Related Issue

Follow-up repository-readiness work after #2380.

Documentation PR

Included in this PR.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Other (please describe): Restore repository policies, notices, and contribution templates.

Testing

• bun run format:check passed across the repository.
• git diff --check passed.
• Checked dependency attributions against the installed package metadata and previously retrieved licenses.
• Confirmed the issue-template diff changes only quoting.

Application tests, typechecking, linting, and builds were not run because these changes affect documentation and repository templates only.

• I ran bun test
• I ran the relevant end-to-end tests with bun run test:e2e, or explained why they are not applicable
• I ran bun run typecheck
• I ran bun run lint:check
• I ran bun run format:check
• I ran bun run build
• If I modified src/assets/, I updated affected snapshots with bun test <test-file> --update-snapshots and committed them

Checklist

• I have read the CONTRIBUTING document
• I have added any necessary tests that prove my fix is effective or my feature works
• I have updated the documentation accordingly
• I have added an appropriate example to the documentation to outline the feature, or no new docs are needed
• My changes generate no new warnings
• Any dependent changes have been merged and published

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

AgentCore Harness Review

Verdict: Looks good

This PR restores standard OSS repo files (LICENSE, NOTICE, CODE_OF_CONDUCT.md, SECURITY.md, .github/pull_request_template.md, and the three .github/ISSUE_TEMPLATE/*.yml files) that are missing from the working branch. I verified every file in the diff is byte-identical (same blob hash) to what's already on main, so this is a pure restore with no risk.

No changes required.

Note (out of scope): the restored NOTICE is somewhat stale relative to the current package.json (missing bedrock-agentcore, winston, yaml, @tanstack/react-query, @opentelemetry/*, semver, lodash, etc., and lists some deps that are no longer present). Since the file is being restored verbatim from main, that drift already exists on main and isn't something this PR should fix — worth tracking separately.

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.25%. Comparing base (824d5a8) to head (1613911).
⚠️ Report is 6 commits behind head on refactor.

Additional details and impacted files

@@            Coverage Diff            @@
##           refactor    #2383   +/-   ##
=========================================
  Coverage     97.25%   97.25%           
=========================================
  Files           613      613           
  Lines         41028    41028           
=========================================
  Hits          39902    39902           
  Misses         1126     1126           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Thanks for the report, @codecov-commenter — feedback like this is exactly
how we catch the things we missed. Because this PR is already
closed, the team won't see follow-up comments here.

Would you mind opening a new issue so we can track it properly?
https://github.com/aws/agentcore-cli/issues/new/choose

If this is a security issue, please report it privately via
https://aws.amazon.com/security/vulnerability-reporting/ instead
of a public issue.