chore: complete package.json metadata and guard against publish

package.json

@@ -3,7 +3,17 @@
   "version": "0.15.0",
   "description": "Author your AI coding agents and skills once. Sync them to every harness you use.",
   "license": "MIT",
+  "author": "MANVENDRA-github",
   "type": "module",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MANVENDRA-github/agentry.git"
+  },
+  "bugs": {
+    "url": "https://github.com/MANVENDRA-github/agentry/issues"
+  },
+  "homepage": "https://github.com/MANVENDRA-github/agentry#readme",
   "scripts": {
     "sync": "node scripts/sync-harnesses.js",
     "sync:dry": "node scripts/sync-harnesses.js --dry-run",
@@ -19,8 +29,10 @@
     "claude-code",
     "cursor",
     "codex",
+    "opencode",
     "ai-agents",
     "skills",
-    "agent-harness"
+    "agent-harness",
+    "mcp"
   ]
 }

scripts/sync-harnesses.js

@@ -254,17 +254,17 @@ async function syncClaude() {
     );
   }
 
-  // Version, description, and license come from package.json — the single place a
-  // release bump happens — so the plugin manifest can never drift from the released
-  // version. Hardcoding them here meant a bump had to be remembered in two files.
+  // Every manifest field comes from package.json — the single place project
+  // metadata and a release bump live — so the plugin manifest can never drift
+  // from it. Hardcoding any of these meant remembering to change two files.
   const pkg = JSON.parse(
     await fs.readFile(path.join(REPO_ROOT, "package.json"), "utf8"),
   );
   const manifest = {
-    name: "agentry",
+    name: pkg.name,
     version: pkg.version,
     description: pkg.description,
-    author: "MANVENDRA-github",
+    author: pkg.author,
     license: pkg.license,
   };
   await writeFile(