chore: aggiungi controlli di governance del repository

.editorconfig

@@ -0,0 +1,6 @@
+root = true
+
+[*]
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true

.gitattributes

@@ -0,0 +1,3 @@
+* text=auto eol=lf
+*.iso binary
+*.gz binary

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# ZDOS Code Owners
+*                   @high-cde
+/os/                @high-cde
+/distro/            @high-cde
+/.github/workflows/ @high-cde

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/interface/web"
+    schedule:
+      interval: "weekly"

.github/workflows/reproducibility.yml

@@ -0,0 +1,11 @@
+name: Reproducibility Check
+on:
+  pull_request:
+    branches: [ main ]
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build environment 1 and 2
+        run: echo "Build ripetuta per verifica degli hash (placeholder)"

.github/workflows/sbom.yml

@@ -0,0 +1,11 @@
+name: Generate SBOM
+on:
+  release:
+    types: [published]
+jobs:
+  sbom:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Generate SBOM (SPDX/CycloneDX placeholder)
+        run: echo "Generazione distinta base del software (SBOM)" > sbom.json