[EnesGoker]

Runtime installation could copy Windows system DLLs and Linux glibc/ELF loader libraries into release packages. Apply platform-specific exclusions while preserving SFML, OpenAL, MSVC and other required third-party runtime libraries.

• Audit installed package members and required shared-library companions through the existing platform verifier.
• Resolve file symlinks and parent junctions strictly before checking package containment; CMake 3.29's Windows REAL_PATH alone does not resolve these links.
• Accept Linux host/package copies of the same library only after package containment and SHA-256 equality of every conflicting candidate are verified. Different contents, missing companions, unresolved libraries and package escapes remain errors.
• Print dependency-check diagnostics on failure and retain only reports and command logs as CI artifacts.
• Register focused packaging controls with CTest and require the CMake helper in source packages. Update contributing links, the bug-report version example and security reporting instructions.

Validation: all 22 focused controls passed locally on macOS with CMake 4.0.2. Native platform results are recorded in CI run 39496844030. PR CI checks the Debug installed runtime; Release ZIP generation and extracted-package checks remain in the tag-triggered Release workflow. No existing tag or Release is changed by this PR.