fix(release): allow npm registry propagation

[up2dul]

Summary

• extend the bounded npm registry lookup window from one minute to three minutes
• keep the existing five-second polling interval
• allow newly published packages time to propagate before verifying integrity, provenance, installation, and runtime behavior

Root cause

The publish action successfully published profanity-kit@0.2.0, but npm returned 404 for more than the verifier's one-minute retry window. The version became publicly visible before three minutes elapsed.

Validation

• pnpm release:verify
• pnpm check