Improve pathsafe release metadata and verification docs

[rogerchappel]

What changed

• Added missing npm package metadata and included existing support/release docs in the package allowlist where applicable.
• Documented the local verification commands already exposed by package scripts.

Why it matters

This makes the package easier to audit from npm and gives contributors copy-pasteable checks before releases or pull requests.

Verification

• npm pack --dry-run: 0; rg verification mentions: 0

Remaining limitations

• This PR does not change runtime behavior or publish a release.