chore(ci): add stage pipeline, pin pip/uv/deps, issue forms and make pr

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,54 @@
+name: Bug report
+description: Something on the printer screen is broken or behaves wrongly
+labels: ["bug"]
+body:
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened
+      description: What went wrong, and what you expected instead.
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. Open ...
+        2. Tap ...
+        3. See ...
+    validations:
+      required: true
+  - type: dropdown
+    id: branch
+    attributes:
+      label: Branch
+      description: The branch the printer tracks.
+      options:
+        - Release-2.0
+        - main
+        - stage
+        - dev
+        - Other
+    validations:
+      required: true
+  - type: input
+    id: commit
+    attributes:
+      label: Commit
+      description: "`git -C ~/BlocksScreen rev-parse --short HEAD` on the printer, if known."
+  - type: input
+    id: hardware
+    attributes:
+      label: Printer and hardware
+      placeholder: e.g. RF50, Raspberry Pi 5, AMU attached
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs
+      description: Relevant lines from logs/BlocksScreen.log and klippy.log.
+      render: shell
+  - type: textarea
+    id: context
+    attributes:
+      label: Screenshots and context

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Report a security vulnerability
+    url: https://github.com/BlocksTechnology/BlocksScreen/security/advisories/new
+    about: Report privately instead of opening a public issue.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,26 @@
+name: Feature request
+description: Suggest a new feature or an improvement
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What is hard or impossible today, and who it affects.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What you would like to happen.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+  - type: textarea
+    id: context
+    attributes:
+      label: Screenshots and context

.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+  # Actions only: pip bumps would break the printers' aarch64 PyQt6 6.7.1 ceiling.
+  - package-ecosystem: github-actions
+    directory: /
+    target-branch: dev
+    schedule:
+      interval: monthly
+    # Skip releases younger than a week, the window most hijacked tags are caught in.
+    cooldown:
+      default-days: 7
+    labels: ["dependencies"]
+    groups:
+      actions:
+        patterns: ["*"]
+    commit-message:
+      prefix: chore
+      include: scope

.github/pull_request_template.md

@@ -0,0 +1,35 @@
+<!-- Title: type(scope): summary, types: feat fix docs refactor test chore perf. Base branch: dev.
+     `make pr` fills the title, base, labels, reviewers and the change list for you. -->
+
+# PR Checklist
+<!-- Delete this section once everything is ticked -->
+- [ ] Title follows Conventional Commits, e.g. `fix(updater): retry apt lock on timeout`; CI rejects anything else
+- [ ] Opened from a feature, bugfix or refactor branch against **dev**
+- [ ] Labels added and a reviewer requested
+- [ ] `make check` passes
+- [ ] CI results checked once the PR is open; failing checks mean changes requested
+
+# Description
+- [ ] Feature
+- [ ] Bug Fix
+- [ ] Code Refactor
+- [ ] Documentation
+
+<!-- Summary of the changes and the issue they fix. A bug from another PR: reference it as #123.
+     "Closes #123" only works on PRs into main, so close issues manually after merging into dev -->
+
+## Changes
+-
+
+# Motivation
+<!-- Why this change is needed. Delete if not applicable -->
+
+# Tests
+<!-- Tests run with logs or reports, and the setup: simulator or printer, config. Delete if not applicable -->
+- [ ] Tested on simulator / printer
+
+# Screenshots
+<!-- UI changes only. Delete if not applicable -->
+
+# Future work
+<!-- Follow-ups tied to this PR, non-breaking only. Delete if not applicable -->

.github/release.yml

@@ -0,0 +1,19 @@
+# Categories for GitHub's "Generate release notes"; first matching label wins, so "*" stays last.
+changelog:
+  categories:
+    - title: Breaking changes
+      labels: ["breaking"]
+    - title: Features
+      labels: ["enhancement"]
+    - title: Bug fixes
+      labels: ["bug"]
+    - title: Performance
+      labels: ["performance"]
+    - title: Refactoring
+      labels: ["refactor"]
+    - title: Documentation
+      labels: ["documentation"]
+    - title: Dependencies
+      labels: ["dependencies"]
+    - title: Other changes
+      labels: ["*"]