Add issue templates

.github/ISSUE_TEMPLATE/1-bug-report.md

+---
+name: "\U0001F41B Bug report"
+about: Report a bug to help us fix it
+title: ""
+labels: bug
+assignees: ""
+---
+
+<!--
+Thank you for helping make this project better!
+
+Please provide minimum reproducable examples and screenshots where relevant.
+Always feel free to submit PRs for any bugs you discover.
+-->

.github/ISSUE_TEMPLATE/2-feature-request.md

+---
+name: "\U0001F680 Feature request"
+about: Suggest an idea for the Cookiecutter template
+title: ""
+labels: enhancement
+assignees: ""
+---
+
+<!-- Please search existing and closed issues to avoid creating duplicates. -->
+
+<!-- Describe the feature you'd like and add any relevant labels. -->
+
+<!-- Please feel welcome to contribute a Pull Request! -->

.github/ISSUE_TEMPLATE/config.yml

+blank_issues_enabled: false
+contact_links:
+  - name: Report a Security vulnerability
+    url: https://github.com/cookiecutter-flask/cookiecutter-flask/security/policy
+    about: Please report security vulnerabilities here.

.github/stale.yml

+# Configuration for probot-stale - https://github.com/probot/stale
+
+# Number of days of inactivity before an Issue or Pull Request becomes stale
+daysUntilStale: 90
+
+# Number of days of inactivity before an Issue or Pull Request with the stale label is closed.
+# Set to false to disable. If disabled, issues still need to be closed manually, but will remain marked as stale.
+daysUntilClose: 7
+
+# Only issues or pull requests with all of these labels are check if stale. Defaults to `[]` (disabled)
+onlyLabels: []
+
+# Issues or Pull Requests with these labels will never be considered stale. Set to `[]` to disable
+exemptLabels:
+  - pinned
+  - security
+  - "[Status] Maybe Later"
+
+# Set to true to ignore issues in a project (defaults to false)
+exemptProjects: false
+
+# Set to true to ignore issues in a milestone (defaults to false)
+exemptMilestones: false
+
+# Set to true to ignore issues with an assignee (defaults to false)
+exemptAssignees: false
+
+# Label to use when marking as stale
+staleLabel: stale
+
+# Comment to post when marking as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+
+# Comment to post when removing the stale label.
+# unmarkComment: >
+#   Your comment here.
+
+# Comment to post when closing a stale Issue or Pull Request.
+# closeComment: >
+#   Your comment here.
+
+# Limit the number of actions per hour, from 1-30. Default is 30
+limitPerRun: 30
+
+# Limit to only `issues` or `pulls`
+only: issues
+# Optionally, specify configuration settings that are specific to just 'issues' or 'pulls':
+# pulls:
+#   daysUntilStale: 30
+#   markComment: >
+#     This pull request has been automatically marked as stale because it has not had
+#     recent activity. It will be closed if no further activity occurs. Thank you
+#     for your contributions.
+
+# issues:
+#   exemptLabels:
+#     - confirmed

SECURITY.md

+If you believe you have found a security vulnerability in this project please contact a [maintainer](https://github.com/jamescurtin).