fix: normalize npm 12 registry responses

[witqq]

Summary

• normalize npm 12 single-field registry JSON as either a string or a one-element array
• reuse the same strict HTTPS URL parser in preflight and final verification
• poll newly published versions for up to two minutes before the final exact-byte comparison

Verification

• live npm 12 registry response for @witqq/spreadsheet@0.6.0 normalizes to its exact HTTPS tarball URL
• actionlint passes
• npm run check:workflows passes
• git diff --check passes

All six v0.6.0 packages were published with provenance by run 33993863690. This change makes the final immutable byte verification compatible with npm 12 and registry propagation.

Made with Moira