ci: re-assert repository metadata after build for provenance

dv-scripts build rewrites package.json repository.url to the upstream repo, failing Trusted Publishing provenance (E422). Re-set it on the built package.json right before publish.

Author: 1337mus

.github/workflows/release.yml

@@ -37,6 +37,15 @@ jobs:
       - name: Build
         run: yarn build
 
+      # `dv-scripts build` resets package.json repository metadata to the upstream
+      # (DylanVann) repo, which fails Trusted Publishing provenance validation
+      # (provenance expects this repo). Re-assert it on the built package.json.
+      - name: Restore repository metadata for provenance
+        run: |
+          npm pkg set repository.type=git
+          npm pkg set repository.url=git+https://github.com/phantom/react-native-fast-image.git
+          npm pkg set homepage=https://github.com/phantom/react-native-fast-image#readme
+
       # No NODE_AUTH_TOKEN: npm exchanges the GitHub OIDC token via the Trusted Publisher.
       - name: Publish
         run: npm publish --access public