pull_request_template.md

What and why

How it was tested

Security checklist

• No secrets, tokens, or credentials in code, config, or history
• New or updated dependencies reviewed (source, license, maintenance)
• Inputs validated; auth and permission checks unchanged or intentionally updated
• No client-specific data or names in a public repository