fix: declare repository metadata required by npm provenance (#51)

Trusted publishing now authenticates, but npm rejected the provenance
bundle with E422 because the published manifests carry no repository
field to match against the signed GitHub source. Add repository
(type/url/directory) to @aryam/fixmap-core and @aryam/fixmap, and
commit the .vercel gitignore entries added by vercel link.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: aryamthecodebreaker

.gitignore

@@ -11,3 +11,5 @@ coverage/
 *.tsbuildinfo
 fixmap-report.json
 fixmap-report.md
+
+.vercel

apps/web/.gitignore

@@ -0,0 +1 @@
+.vercel

packages/cli/package.json

@@ -3,6 +3,11 @@
   "version": "0.4.0",
   "description": "CLI and MCP server for mapping issues and diffs to relevant files, tests, and review risks.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aryamthecodebreaker/FixMap.git",
+    "directory": "packages/cli"
+  },
   "type": "module",
   "bin": {
     "fixmap": "dist/cli.js"

packages/core/package.json

@@ -3,6 +3,11 @@
   "version": "0.4.0",
   "description": "Core repository scanner, ranker, and report renderer for FixMap.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aryamthecodebreaker/FixMap.git",
+    "directory": "packages/core"
+  },
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",