Adds the local task runner required by
docs/governance/repository-bootstrap-plan.md v0.1.0 §3, with stubs
for format, lint, test, verify-docs, and security-scan.
Closes the last gap in repository-bootstrap-plan v0.1.0; CI workflow
files remain deferred per the plan.
