build: make package private and update repository

The package needs to be set to private, as we aren't members of
`@semantic-release`, and so can't publish this to NPM.

The licence and repository URL were also out of date, and have now
been updated.