fix: normalize repository.url to git+https for npm publish