Add standard go-openapi monorepo infrastructure

[Copilot]

Bootstraps go-openapi/Codegen with the standard monorepo infrastructure mirrored from go-openapi/swag.

Added

• .golangci.yml — golangci-lint v2 config with the canonical go-openapi linter/formatter settings
• SECURITY.md — vulnerability reporting policy and supported versions
• go.mod — root module github.com/go-openapi/Codegen, go 1.25.0
• README.md — skeleton with the standard badge set (CI, coverage, CodeQL, release, license, GoDoc, Discord) wired to this repo
• .github/dependabot.yaml — weekly gomod + github-actions updates, grouped into 4 PR buckets (dev, golang.org, go-openapi, other)
• .github/workflows/ — 8 shared CI workflows delegating to go-openapi/ci-workflows@v0.3.4 (pinned by commit SHA):
  • go-test.yml — test on push/PR (monorepo variant)
  • codeql.yml — CodeQL scan on push/PR/schedule
  • scanner.yml — trivy + govulncheck on push/schedule
  • auto-merge.yml — auto-merge qualifying dependabot PRs
  • bump-release.yml — manual semver bump dispatch
  • tag-release.yml — GitHub release on semver tag push
  • contributors.yml — weekly contributors list update
  • monitor-bot-pr.yml — daily bot PR monitor

Updated

• LICENSE — normalized to canonical Apache 2.0 formatting matching swag

Original prompt

Copy our standard go-openapi go monorepo infrastructure (model: go-openapi/swag).

This includes:

• config files: .golangci.yml
• Standard doc: SECURITY.md, LICENSE
• skeleton README.md (same structure and badges)
• same CI: .github folder with dependabot config and shared workflow
• root go.mod with go1.25.0 requirement