Extend copilot-instructions

[nirav-raval]

🎯 Aim

Improve copilot-instructions.md to give GitHub Copilot Agent clearer operational rules regarding branching, PR targets, dependency restrictions, and required use of contributing.md.

📷 Result

N/A

✅ What was done

• Added rules enforcing dev branch as source and PR target
• Added rule to always consult contributing.md
• Added restriction preventing Copilot Agent from introducing new npm packages
• Added restriction preventing updates to npm-shrinkwrap.json unless explicitly required
• Updated context guidance for Copilot Agent

🔗 Related issue

Closes: #564

[Saurabh7019]

Thank you, @nirav-raval ! We will review it soon.

[Copilot]

Pull request overview

This PR extends the .github/copilot-instructions.md file to provide clearer operational rules for GitHub Copilot Agent, including branching conventions, dependency management restrictions, and testing requirements. The changes aim to enforce the dev branch workflow, prevent unauthorized dependency additions, and ensure Copilot Agent consults contributing.md for workflow guidance.

Key changes:

• Added "Contribution & Branching Rules" section enforcing dev branch as source and PR target
• Added dependency management restrictions preventing unauthorized npm package additions
• Added "Testing & Validation" and "Security and privacy" sections with operational guidelines

Issues identified:

• Filename references use incorrect casing (contribution.md instead of contributing.md, CONTRIBUTING.md instead of contributing.md)
• Tool names were incorrectly changed from correct add_spo_list pattern to incorrect spo_list_add pattern
• Dependency management rules are placed within "Extension Dependencies" subsection, mixing listing with rules

[Saurabh7019]

Hi @nirav-raval, could you please address the issues identified in the Copilot review before we test the flow? Also, 'Contribution & Branching Rules' section seems to be out of place. Could you add a new main section (right after 'Architecture Overview') called 'Key Considerations' and consolidate all of the do's and don'ts under it? including all your changes in - Contribution & Branching Rules, Extension Dependencies, File Changes & Documentation, Testing, and Security and privacy

[Saurabh7019]

I modified some of the instructions so they apply correctly to the GitHub Copilot autonomous agent. Removed items that were targeted at human contributors, like, anything referring to 'running locally', 'manual testing', or 'consult a maintainer' without a clear alternative (e.g., creating a draft PR or adding a note).

Also, for future PRs, let's keep the number of commits limited.. ideally one per PR, two at most if review changes are needed. I have cleaned this PR already, just noting it for future runs.