Harden conversation surface against external interaction

The repository's issue, pull-request, and discussion surfaces shall accept input only from vetted authors. Mechanism details — scope, lifetime, enforcement layer — are operational and not recorded here.

### Scope

- Add ADR capturing the policy.