fix(publish): align package metadata and harden npm publish flow

[synsoftworksdev]

Summary

Make the npm publish path more reliable by aligning package metadata with the
real GitHub repository and adding small publish workflow hardening.

Changed

• update package.json to point at the real repo:
  • repository.url -> git+https://github.com/synsoftworksdev/gitrole.git
  • bugs.url -> https://github.com/synsoftworksdev/gitrole/issues
• normalize bin.gitrole to dist/cli/index.js
• harden .github/workflows/publish.yml without changing the release strategy
• add a small diagnostics step that prints package name, version, and repository.url
• add an npm preflight that checks whether the exact version is already published
• skip npm publish cleanly when the version already exists
• keep:
  • tag/version verification
  • npm run test:release
  • npm pack --dry-run
  • npm publish --provenance --access public
• update test/e2e/package-smoke.test.ts so the assertion matches the normalized bin path

Verification

• npm run build
• npm test
• npm run test:release
• npm pack --dry-run

Notes

• no CLI logic changes
• local npm pack --dry-run needed a temporary npm cache because the default ~/.npm cache had a permissions issue
• package packing itself completed cleanly