Add org-wide health files and clean up the profile page

[obezpalko]

What does this change?

This repo was using only half of what the org .github repo is for — the profile banner — and none of the default community health files that back every comet-ml repo lacking its own copy.

profile/README.md

• Fixed the "Opik MCP Repository" header link: it pointed at modelcontextprotocol.io (the generic MCP spec site) instead of comet-ml/opik-mcp. The body section already linked it correctly, so only the header was wrong.
• Made the logo theme-aware with <picture> + prefers-color-scheme, so it stays visible for dark-mode visitors instead of relying on the single logo_comet_light.png.
• Collapsed the duplicated "Getting Started" and "Projects" sections — they listed the same three repos twice — into one table, and folded the redundant "About" section into the intro. Same three repos featured, no additions.

README.md — was a bare # .github stub. Now explains what the repo is and that every file in it is an org-wide fallback, so anyone editing understands the blast radius.

New org-wide defaults (each applies only to repos that don't ship their own):

• SECURITY.md — private reporting via GitHub security advisories, with a fallback to opening the advisory on opik if a repo hasn't enabled private reporting
• CODE_OF_CONDUCT.md — Contributor Covenant 2.1
• SUPPORT.md — routes questions to Slack, bugs to the right repo, security to the private channel
• .github/ISSUE_TEMPLATE/ — bug report and feature request forms, plus contact links for Slack, docs, and security
• .github/PULL_REQUEST_TEMPLATE.md

Related issues

None.

How was this tested?

• All three issue-template YAML files parse cleanly (yaml.safe_load).
• Markdown reviewed by reading; no build or CI exists in this repo.
• Links were not verified live — the sandbox proxy blocks outbound HTTPS to github.com and comet.com. Two things worth a click before merge:
  • https://www.comet.com/images/logo_comet_dark.png — I inferred this filename from the existing _light asset. If it doesn't exist, dark-mode visitors get a broken image, which is worse than today. Please confirm it resolves, or tell me the real dark asset URL and I'll update.
  • https://github.com/comet-ml/opik/security/advisories/new — requires private vulnerability reporting to be enabled on opik.

Checklist

• I have read the contributing guidelines for this repository
• Tests are added or updated where it makes sense — n/a, no test suite
• Documentation is updated where user-facing behavior changed
• The change is scoped to one thing and the description explains it

One thing that needs your input

CODE_OF_CONDUCT.md currently routes enforcement reports to "repository maintainers, or privately to a Comet team member in Slack" because I don't have a real contact to put there. A dedicated monitored address (e.g. conduct@comet.com) would be materially better — tell me the address and I'll push it.

---

Generated by Claude Code