Closes a repo-health/hygiene gap surfaced by the Obsidian community trust/health signal. Canonical Covenant 2.1 text; reporting contact set to the maintainer email already public in git history.
