fix: add repository field so provenance validation passes

[nicknisi]

npm hard-requires repository.url to match the repo attested in the OIDC provenance bundle. Without it, provenance-signed publishes fail:

E422 Unprocessable Entity - Error verifying sigstore provenance bundle:
"repository.url" is "", expected to match "https://github.com/workos/authkit-electron"

This is the last blocker for CI publishes (failed run). Merging this will make release-please cut v0.1.2, and that release will publish cleanly via trusted publishing.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[greptile-apps]

Greptile Summary

Adds canonical GitHub repository metadata to the package manifest so npm can validate trusted-publishing provenance.

• Declares the repository type as Git.
• Sets the repository URL to git+https://github.com/workos/authkit-electron.git.

Confidence Score: 5/5

The PR appears safe to merge with no actionable defects identified.

The added repository URL matches the project’s canonical remote, and the release workflow publishes from this root manifest without a conflicting metadata source.

Important Files Changed

Filename	Overview
package.json	Adds valid repository metadata matching the canonical GitHub repository; no actionable issues identified.

_{Reviews (1): Last reviewed commit: "fix: add repository field so provenance ..." | Re-trigger Greptile}