Drop the community docs

Remove CONTRIBUTING.md, CODE_OF_CONDUCT.md and SECURITY.md, and rewire
everything that pointed at them.

README now sends contributors to AGENTS.md, which already carries the setup,
the checks, the registry-editing steps and the conventions. The security
paragraph still asks for private reports through GitHub's Security tab; the
issue-template config routes there independently of the deleted file.

eslint.config.js cited CONTRIBUTING.md as the source of the no-default-exports
rule; it now cites AGENTS.md "Conventions", which states the same rule.
AGENTS.md loses the line asking that the two be kept in step.

The 1.1.0 changelog entry no longer claims the three files were added.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: ion05

AGENTS.md

@@ -505,4 +505,3 @@ branch. If you stack them, **do not pass `--delete-branch`** when merging: delet
 auto-closes the child PR that targets it. Merge bottom-up without it, or retarget the tip to master
 and merge once.
 
-`CONTRIBUTING.md` is the same material written for a human contributor. Keep the two in step.

CHANGELOG.md

@@ -57,8 +57,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `pnpm package`: a deterministic, zero-dependency release zip with
   `manifest.json` at its root and no sourcemaps.
 - GitHub Actions CI running typecheck, tests, build and the release packer,
-  plus an icon-drift check. Also the MIT License, and CONTRIBUTING, SECURITY,
-  CODE_OF_CONDUCT and PRIVACY files.
+  plus an icon-drift check. Also the MIT License and a PRIVACY file.
 
 ### Changed
 

CODE_OF_CONDUCT.md

@@ -88,10 +88,8 @@ the extension's own pages needs no network.
 
 ## Contributing
 
-[CONTRIBUTING.md](CONTRIBUTING.md) covers the setup, the checks a change has to pass, and how to add
-a command. [AGENTS.md](AGENTS.md) is the architecture note.
-[CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) applies. Released versions are listed in
-[CHANGELOG.md](CHANGELOG.md).
+[AGENTS.md](AGENTS.md) covers the setup, the checks a change has to pass, how to add a command, and
+the architecture. Released versions are listed in [CHANGELOG.md](CHANGELOG.md).
 
 ## Privacy and security
 
@@ -101,8 +99,7 @@ device, and the only other thing stored is which groups you have folded. Full st
 [PRIVACY.md](PRIVACY.md).
 
 BunnyLol holds redirect rules on three search engines, so a routing bug here is a browsing-data bug.
-Report a vulnerability privately through GitHub's Security tab rather than as an issue:
-[SECURITY.md](SECURITY.md).
+Report a vulnerability privately through GitHub's Security tab rather than as an issue.
 
 ## License
 

CONTRIBUTING.md

@@ -1,5 +1,5 @@
 // Flat config. The rules worth having are the ones `tsc` cannot see and that
-// CONTRIBUTING.md states by hand. Anything the typechecker already fails on is
+// AGENTS.md states by hand. Anything the typechecker already fails on is
 // not repeated here: `pnpm typecheck` is the gate that catches it.
 //
 // Every `off` below is a convention this repo made on purpose, with the reason
@@ -28,7 +28,7 @@ export default tseslint.config(
       },
     },
     rules: {
-      // CONTRIBUTING.md, "Style": no default exports. A named export is
+      // AGENTS.md, "Conventions": no default exports. A named export is
       // greppable and cannot be silently renamed at the import site. Written as
       // a core selector rather than pulling eslint-plugin-import-x, whose only
       // other rule worth having here (`order`) is turned down below anyway and