fix: add repository field to all package.json for npm provenance

npm OIDC provenance requires package.json "repository.url" to match
the GitHub repo URL, or publishing returns a 422 Unprocessable Entity.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>