Adopt org governance v1.0.1

[enricopiovesan]

Summary

Adopts the org-wide governance released as v1.0.1:

• cla.yml — CLA gate on every PR (contributor-assistant, signatures stored centrally in traverse-framework/.github@cla-signatures). Requires the CLA_ASSISTANT_PAT org secret; until it is set, the check fails closed for external contributors.
• governance.yml — baseline gate: governance version pin, CODEOWNERS, dependabot config, agent docs, and spec-alignment wiring where the gate is vendored.
• .governance-version — pins this repo to governance v1.0.1; adopting a newer release is a deliberate PR.
• dependabot.yml — added only if the repo didn't have it.

Project Item

Tracking issue: #120 — add to this repo's project board per CONTRIBUTING.

Definition of Done

• Governance workflows present and required files in place on this branch
• .governance-version pins v1.0.1
• All PR checks green

Validation

• This repo's own CI (including spec-alignment where wired) runs on this PR and must pass.
• baseline / governance-baseline becomes green after Governance v1.0.1: fix reusable gate and rollout script .github#4 merges (it fixes the reusable gate); re-run checks on this PR afterwards.

Closes #120

🤖 Generated with Claude Code