Two fixes in one commit:

1. Add repository/homepage/bugs to package.json. The npm sigstore
   verifier rejects --provenance publishes when repository.url is
   empty (422 Unprocessable Entity). Provenance is signed fine but
   the cross-check between package.json and the GitHub OIDC claim
   fails.

2. Set include-component-in-tag: false in release-please config.
   Without this, release-please tags releases as ui-v1.1.1 (its
   monorepo default), but the CI workflow only triggers on v*
   refs. Switch to plain v* so the publish job picks up future
   releases without manual tag surgery.