Add a `CODE_OF_CONDUCT`

[jamietanna]

A TL;DR for why we've not yet done it is that we want to make sure we set it up correctly and with the right things in place to support it, rather than it being seen as "a tickbox exercise" - which it very much isn't.