feat: port 8 public-safe patterns and release system

.github/workflows/security.yml

@@ -111,3 +111,16 @@ jobs:
 
       - name: Validate public edition scope
         run: python scripts/check_open_core_boundary.py --repo-root .
+
+  internal-instruction-boundary:
+    name: Internal Instruction Boundary
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Ensure internal assistant files are not tracked
+        run: |
+          if git ls-files | grep -E '(^|/)(CLAUDE\.md|AGENTS.*\.md)$'; then
+            echo "Forbidden tracked files found: CLAUDE.md / AGENTS*.md"
+            exit 1
+          fi