Root package.json missing license/repository/author metadata

\`cli/package.json\` has full metadata (\`license\`, \`repository\`, \`author\`, \`homepage\`, \`bugs\`, \`keywords\`) but the root \`package.json\` only has \`name\`, \`version\`, \`description\`. Since the root manifest is what \`npm\`/GitHub's dependency graph and some tooling read for the monorepo itself, it should carry the same metadata for consistency (\`"private": true\` already prevents accidental publish, so adding these is safe).

**Ask:** add \`license: "MIT"\`, \`repository\`, \`author\`, \`homepage\`, \`keywords\` to root \`package.json\` matching \`cli/package.json\`.

Compare the metadata in cli/package.json with the root package.json. Add the requested license, repository, author, homepage, and keywords fields to the root manifest with matching values, then verify that the existing private setting remains unchanged.

Written by the indexing model from the issue text.