Consolidate consumer docs, release history and community metadata

[jmanico]

The front page mixed released 1.4.1 guidance with unreleased 1.5 contracts and scattered build/history material. Consolidate the consumer README and context/JSP/JPMS examples, label version-sensitive behavior, and add a verified changelog, release-notes template, contributor forms and current project metadata.

• Preserve the 1.4.1 security/Central-pending notice (all five exact Central POMs still return 404), 1.x APIs and identities, original authorship, and separate core/adapter dependency scopes.
• Inventory 28 resolved consumer dependency coordinates with POM/artifact license provenance. Preserve the four historical wiki pages byte-for-byte before hiding the stale wiki after merge; current guidance replaces their obsolete examples.
• Validate CODEOWNERS accounts against live repository admin access, describe existing review/CI rules accurately, and distinguish the existing maintainer funding manifest from Foundation donations. Discussions stays disabled and ordinary blank issues remain enabled.
• Refresh all four Bundle-Vendor/Bundle-DocURL values and all five effective POMs using current OWASP records. No Java implementation or dependency scope changes.

Validation: fresh-repository clean verify, coverage, packaged JSP engines, 17 artifact guards, 14 policy/verification tests, 34-file parity and Java 17 classpath/JPMS/Felix consumers passed. The documented module example compiled and ran against the signature-verified original 1.4.1 JAR. Community YAML, local links, tag/release history and archive hashes checked. Sol identified two version/context wording errors and broken moved links; corrected. Final Sol re-review and Astra review through 735ad8b found no actionable issues. Both clean reference builds produced identical copies of all 17 payloads after the metadata changes; hashes are recorded in releases/batch-05-validation.md. GitHub CODEOWNERS validation reports no errors. All 28 final-head PR checks passed on 735ad8b. Post-merge live metadata, archived/hidden wiki, community forms/funding display and zero CODEOWNERS errors were verified; results are recorded in #117 and #169.

Closes #128 (including consolidated #114), closes #115, closes #116, closes #127.
Refs #117 and batch 05 in #169; #117's final live description/topics/wiki verification follows this merge. #110/#111 and the full 1.5 release gate remain open; no historical release assets or tags are changed.