CNCF Incubation Readiness: Governance Restructuring & DD Required Items

Tracking issue for CloudNativePG's CNCF incubation due diligence, per cncf/toc#1961 and the feedback being received from the TOC as part of the process.

Two workstreams feed this epic:

1. Five DD-required items that must close before the TOC vote (plus one post-incubation commitment).
2. A governance restructuring, proposed by the maintainers and supported by the TOC, that separates org-level governance authority (Steering Committee) from technical authority (subproject maintainer committees).

### Before the TOC vote

- [ ] Ratify the governance restructuring proposal (community review) — `cloudnative-pg/governance`
- [ ] Rewrite GOVERNANCE.md: subprojects, maintainer committees, steering charter — `cloudnative-pg/governance`
- [ ] Implement org-balanced voting (one vote per org) — `cloudnative-pg/governance`
- [ ] Formalise non-EDB maintainer pathway; elevate initial non-EDB subproject maintainers — `cloudnative-pg/governance`
- [ ] Form the Steering Committee; hold first meeting with published minutes — `cloudnative-pg/governance`
- [ ] Document the Security Response Team (roles, triage, escalation) — `cloudnative-pg/governance`
- [ ] Fix EDB logo/commercial link on cloudnative-pg.io — `cloudnative-pg/cloudnative-pg.github.io`
- [ ] Update SECURITY-INSIGHTS.yml primary contact to security@cloudnative-pg.io — `cloudnative-pg/cloudnative-pg`
- [ ] Update .goreleaser.yml maintainer to a project email — `cloudnative-pg/cloudnative-pg`
- [ ] Complete TOC adopter verification interviews (3+ required) — `cloudnative-pg/governance`

### Post-incubation

- [ ] 6-month progress update to the TOC — `cloudnative-pg/governance`

### References

- [CNCF project-template: GOVERNANCE-subprojects.md](https://github.com/cncf/project-template/blob/main/GOVERNANCE-subprojects.md)
- [CNCF vendor neutrality guidelines](https://contribute.cncf.io/maintainers/community/vendor-neutrality/)

This is an umbrella tracking issue spanning cloudnative-pg/governance, cloudnative-pg/cloudnative-pg.github.io, and cloudnative-pg/cloudnative-pg. Start by separating the listed pre-vote workstreams from the post-incubation commitment and read the linked CNCF governance references. Done means the checklist items are completed, including governance changes, published meeting minutes, configuration updates, and adopter verification.

Written by the indexing model from the issue text.