docs: clarify upstream expectations

- add a dedicated guide for upstream projects working with Homebrew
- link relevant maintainer and policy docs to the new guidance
- explain escalation and decision-making expectations more clearly