fix(build): add the npm metadata provenance and the npm page need

repository, bugs and homepage were never actually added. Without
repository the npm page shows no link to the source at all, and npm
validates that field against the OIDC claim when generating provenance —
so a trusted-publish would have produced a package with no provenance and
no way back to the code.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: mschmicking

package.json

@@ -4,6 +4,14 @@
   "description": "CLI to sync ioBroker JavaScript/TypeScript scripts with a local folder",
   "license": "MIT",
   "author": "Maurice Schmicking",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mschmicking/iobroker-sync.git"
+  },
+  "bugs": {
+    "url": "https://github.com/mschmicking/iobroker-sync/issues"
+  },
+  "homepage": "https://github.com/mschmicking/iobroker-sync#readme",
   "keywords": [
     "iobroker",
     "cli",