[WIP] Roll up P4X-ng/PhoenixBoot reviews and tickets

[Copilot]

• Understand issues Complete CI/CD Review - 2025-12-27 #120, Complete CI/CD Review - 2025-12-28 #121, Complete CI/CD Review - 2025-12-29 #122 (CI/CD reviews)
• Fill in CONTRIBUTING.md with contribution guidelines
• Fill in CODE_OF_CONDUCT.md with code of conduct
• Fill in SECURITY.md with security policy
• Fill in CHANGELOG.md with changelog structure
• Verify changes and ensure documentation is complete

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Roll up of last few reviews and tickets</issue_title>
<issue_description>Go ahead and roll up #120 #121 and #122 into one ticket please and address those issues</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Roll up of last few reviews and tickets #123

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

---

Note

Adds a contributor guide to standardize workflows and expectations.

• New CONTRIBUTING.md detailing getting started, branching, and upstream sync
• Development setup with prerequisites, venv, dependency install, and ./pf.py verification
• Coding standards for Python, shell, and UEFI/EDK2 code
• Testing requirements, including QEMU/OVMF guidance and coverage expectations
• Pull request process with commit message conventions and review checklist
• Issue templates referenced for bugs/features and private reporting for security

^{Written by Cursor Bugbot for commit 966f6f4. Configure here.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[P4X-ng]

trty again @copilot

[mergify]

🧪 CI Insights

Here's what we observed from your CI run for 966f6f4.

🟢 All jobs passed!

But CI Insights is watching 👀

[mergify]

PR can not be merged due to conflict. Please rebase and resubmit