Provenance failed on publish, due to missing repo in sub-packages

[khawkins]

Still trying to fix OIDC issues. Next failure is:

npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=946248236
npm error code E422
npm error 422 Unprocessable Entity - PUT https://registry.npmjs.org/@salesforce%2fmagen-mcp-workflow - Error verifying sigstore provenance bundle: Failed to validate repository information: package.json: "repository.url" is "", expected to match "https://github.com/forcedotcom/mobile-mcp-tools" from provenance

So I'm creating the repository entries in the publishable packages.