docs: add release-readiness baseline

[bntvllnt]

Summary

• Add minimal release-readiness docs for @vllnt/logger: CHANGELOG.md, CONTRIBUTING.md, SECURITY.md, AGENTS.md, llms.txt, and llms-full.txt
• Document the current public package API, support/security expectations, and no-release agent guardrails
• No version bump, tag, publish, merge, or announcement action taken

Verification

• pnpm install --frozen-lockfile
• pnpm run lint
• pnpm run check-types
• pnpm run build
• pnpm run test (33 tests passed)
• git diff --check HEAD~1..HEAD

Review gate

{"branch":"vllnt-oss","tenant":"releases","aor_fit":true,"context_read":true,"evidence_attached":true,"opsec_checked":true,"safe_for_next_step":true,"blocking_findings":[]}

[greptile-apps]

Your free trial has ended. If you'd like to continue receiving code reviews, you can add a payment method here.

[bntvllnt]

Review — 0 findings (0 blocking, 0 warn)

BLOCKING

• None.

WARN

• None.

VERIFIED CLEAN

• Reviewed every changed file for PR #9 at fe19cbeca3082798ed139d2378501b383894bf8c: AGENTS.md, CHANGELOG.md, CONTRIBUTING.md, SECURITY.md, llms-full.txt, and llms.txt.
• The diff is scoped to release-readiness documentation/policy metadata only.
• Package facts are consistent with the repo/package metadata: @vllnt/logger, MIT license, pnpm 10.28.2, current documented release 0.1.2, zero runtime dependencies, sideEffects: false, and the documented subpath exports.
• No package-specific policy drift, stale release promise, unsupported security commitment, private/internal operational detail, local path, or credential material found in the changed public docs.
• No release action was taken.

VALIDATION

• Live PR state re-fetched before handoff: open, non-draft, head fe19cbeca3082798ed139d2378501b383894bf8c.
• GitHub check-runs on the head are green: CodeQL, Quality Gates, Analyze (javascript-typescript), and Analyze (actions).
• Local doc-consistency validation passed for package facts, public release/version alignment, export documentation, zero runtime dependencies, and obvious private-token/path scan.
• Local pnpm gates were not rerun because this PR only adds Markdown release-readiness docs and GitHub Quality Gates are already green.

Approval is recommended, but final approval is reserved for bntvllnt/manual maintainer action.