ci(workflows): align ai-ci, codeql sast, and governance docs from master to main branch (#188)

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -7,7 +7,7 @@ body:
     attributes:
       value: |
         > 💡 **Adding a new Skill (`SKILL.md`) or Subagent (`SUBAGENT.md`) to `catalog/`?**
-        > You do **not** need to open an Issue! Follow [`CONTRIBUTING.md`](https://github.com/OdevMatheus/SkillOps/blob/master/CONTRIBUTING.md) (**Track A**) and open a Pull Request directly.
+        > You do **not** need to open an Issue! Follow [`CONTRIBUTING.md`](https://github.com/OdevMatheus/SkillOps/blob/main/CONTRIBUTING.md) (**Track A**) and open a Pull Request directly.
         >
         > Use this template for **Track B (Core Solution)** changes (`src/`, `.github/`, new AI IDE adapters, or TUI improvements).
   - type: dropdown

.github/workflows/ai-ci.yml

@@ -3,10 +3,10 @@ name: SkillOps AI Engine & Catalog CI
 on:
   push:
     branches:
-      - master
+      - main
   pull_request:
     branches:
-      - master
+      - main
 
 permissions:
   contents: read

.github/workflows/codeql.yml

@@ -2,9 +2,9 @@ name: "CodeQL SAST Security Scan"
 
 on:
   push:
-    branches: ["master"]
+    branches: ["main"]
   pull_request:
-    branches: ["master"]
+    branches: ["main"]
   schedule:
     - cron: "20 3 * * 1"
 

.github/workflows/release-drafter.yml

@@ -3,7 +3,7 @@ name: Release Drafter
 on:
   push:
     branches:
-      - master
+      - main
   pull_request_target:
     types: [opened, reopened, synchronize, labeled, unlabeled]
 

AGENTS.md

@@ -40,7 +40,7 @@ node dist/cli.js eval --catalog catalog --strict
 ## 3. Agile Governance (`1 Issue = 1 Branch = 1 PR`)
 
 1. **Sprints = GitHub Milestones:** Every Issue and PR must belong to an active Sprint Milestone and carry scope/type Labels (`🐍 core-engine`, `🧠 skill-catalog`, `⚙️ ci`, `📄 docs`, `✨ feat`, `🐛 fix`, etc.).
-2. **Branch Protection:** Never commit or push directly to `master`. Use `<type>/<short-kebab-slug>` (`feat/...`, `fix/...`, `docs/...`, `ci/...`, `refactor/...`, `test/...`).
+2. **Branch Protection:** Never commit or push directly to `main`. Use `<type>/<short-kebab-slug>` (`feat/...`, `fix/...`, `docs/...`, `ci/...`, `refactor/...`, `test/...`).
 3. **Conventional Commits (`en-US`):** Lowercase imperative (`feat(auditor): ...`, `ci(devops): ...`, `docs(contract): ...`). Update `CHANGELOG.md` (`## [Unreleased]`) for notable changes.
 
 ---

CHANGELOG.md

@@ -18,6 +18,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Step 2 TUI Installed Status Indicator (`#171`):** Added `detectExistingTargetsForItem()` in [`src/sync/adapters.ts`](./src/sync/adapters.ts) and target-aware hint formatting in [`src/cli.ts`](./src/cli.ts) and [`src/ui/prompt.ts`](./src/ui/prompt.ts) so Step 2 of `npx skillops-cli add` displays `[installed]` (when present in all selected IDEs) or `[installed: <targets>]` (when present in a subset of selected IDEs).
 - **`env-secrets-guard` skill (`arch-quality`):** Detects hardcoded credentials, `.env` files tracked by git, and `.env` files missing from `.gitignore` through the stdlib-only [`scan_secrets.py`](./catalog/arch-quality/env-secrets-guard/scripts/scan_secrets.py) (`--json`, exit codes `0`/`1`/`2`, secrets redacted in output).
 
+### Changed
+- **CI/CD & CodeQL Default Branch Alignment (`#188`):** Updated [`.github/workflows/ai-ci.yml`](./.github/workflows/ai-ci.yml), [`.github/workflows/codeql.yml`](./.github/workflows/codeql.yml), [`.github/workflows/release-drafter.yml`](./.github/workflows/release-drafter.yml), [`.github/ISSUE_TEMPLATE/feature_request.yml`](./.github/ISSUE_TEMPLATE/feature_request.yml), [`AGENTS.md`](./AGENTS.md), and [`CONTRIBUTING.md`](./CONTRIBUTING.md) to trigger and reference `main` instead of `master`.
+
 ### Removed
 - **Outdated `docs/BENCHMARKS.md` (`#179`):** Removed legacy `v1.0.0` benchmark document referencing removed CLI commands (`tokens`, `audit`, `eval`) and retired catalog entries, and dropped `"docs/BENCHMARKS.md"` from `package.json` `files`.
 

CONTRIBUTING.md

@@ -79,7 +79,7 @@ npm test
 If you want to fix a bug, improve the TUI design, update a runtime adapter in `src/sync/`, or propose an architectural change:
 
 1. **Open a GitHub Issue first** describing the problem, motivation, and proposed change.
-2. **Create a branch from `master`** following the required naming pattern (`1 Issue = 1 Branch = 1 PR` for core changes).
+2. **Create a branch from `main`** following the required naming pattern (`1 Issue = 1 Branch = 1 PR` for core changes).
 3. **Run the full verification suite locally:**
    ```bash
    npm run lint