docs: add privacy-safe issue templates

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,26 @@
+---
+name: Bug report
+about: Report a reproducible issue in this tool
+title: "[Bug]: "
+---
+
+## Environment
+
+- Tool version:
+- Node.js version:
+- Operating system:
+- CLI, GitHub Action, or library usage:
+
+## Description
+
+## Steps to reproduce
+
+1.
+2.
+3.
+
+## Expected and actual behaviour
+
+## Minimal sanitised fixture or output
+
+Use synthetic configuration and remove Shopify credentials, merchant data, private repository URLs, access tokens, and secrets. Do not report suspected security vulnerabilities here; use the private reporting link in the repository's issue menu.

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,8 @@
 blank_issues_enabled: false
 contact_links:
-  - name: Security reports
-    url: https://github.com/RexCode-Digital/shopify-upgrade-guard/blob/main/SECURITY.md
-    about: Please report suspected vulnerabilities privately instead of opening a public issue.
+  - name: Report a security vulnerability privately
+    url: https://github.com/RexCode-Digital/shopify-upgrade-guard/security/advisories/new
+    about: Do not report suspected vulnerabilities or include secrets in a public issue.
+  - name: Support and usage questions
+    url: https://github.com/RexCode-Digital/shopify-upgrade-guard/blob/main/SUPPORT.md
+    about: Review the support guide before opening a usage question.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,17 @@
+---
+name: Feature request
+about: Suggest a focused improvement to the tool
+title: "[Feature]: "
+---
+
+## Problem or use case
+
+## Proposed behaviour
+
+## Shopify surface or documentation evidence (if applicable)
+
+Link current official Shopify documentation where the request depends on Shopify semantics.
+
+## Alternatives considered
+
+Do not include credentials, merchant/customer data, private source, or production configuration.