Drop the publish_to: none private guard, point homepage/repository at
real URLs (the old homepage referenced the squatted azfive GitHub
name), and add the CHANGELOG pub.dev expects.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>