Documents the org-wide policy for dependabot.yml files: ecosystem selection, standard templates for single/multi-ecosystem repos and SAM projects, auto-assignment, and merge guidance.
Conventions covering naming, git workflow, commit messages, pull requests, code review, GitHub standards, AWS infrastructure, SAM project layout, and secrets management. Commit messages section adapted from RomuloOliveira/commit-messages-guide (CC-BY-4.0).