fix: make npm publish CI check repo-aware

[jb-thery]

Summary

• pass the repository explicitly to the publish workflow CI verification step
• fixes workflow_dispatch runs that execute before checkout and therefore lack git repo context

Validation

• git diff --check
• secret-pattern scan