fix: add repository field to published packages for provenance validation

npm trusted publishing generates provenance attestations and requires
package.json "repository.url" to match the source repo. Both packages
were missing the field, failing publish with E422.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ryansolid

packages/start-nitro-v2-vite-plugin/package.json

@@ -3,6 +3,11 @@
   "description": "Nitro v2 plugin for development with SolidStart 2.0",
   "version": "0.3.0",
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/solidjs/solid-start.git",
+    "directory": "packages/start-nitro-v2-vite-plugin"
+  },
   "scripts": {
     "build": "tsc",
     "typecheck": "tsc --noEmit",

packages/start/package.json

@@ -2,6 +2,11 @@
   "name": "@solidjs/start",
   "version": "2.0.0-alpha.3",
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/solidjs/solid-start.git",
+    "directory": "packages/start"
+  },
   "scripts": {
     "build": "pnpm validate-imports && tsc && node scripts/build.js",
     "dev": "tsc --watch",