fix(cli): point colonyq repository.url at opencue/colony for npm provenance

[NagyVikt]

Problem

The Release workflow fails at changeset publish with:

E422 ... Error verifying sigstore provenance bundle: Failed to validate repository information:
package.json: "repository.url" is "git+https://github.com/recodeee/colony.git",
expected to match "https://github.com/opencue/colony" from provenance

npm trusted publishing (OIDC) now authenticates correctly and signs provenance, but the registry rejects the publish because the signed source repo (opencue/colony) doesn't match the package's repository.url, which still points at the pre-rename org recodeee/colony.

Fix

Update apps/cli/package.json homepage, repository.url, and bugs.url from recodeee/colony → opencue/colony (the org was renamed; recodeee/colony redirects here).

Effect

Once merged, the release job on main republishes colonyq@0.8.0 and the provenance check passes.

Notes

• Scoped to the published package only. The root package.json and historical openspec//docs references still say recodeee but are unpublished/non-functional — separate cleanup if wanted.
• No test asserts repository.url; the recodeee mentions in skills.ts/skills-wire.test.ts are an unrelated skill-install typo guard.