Add NPM_CLAIM token type and ApplicationNpmClaimService for verifying
npm package ownership. The flow:
1. Server generates a signed JWT containing packageName + workspaceId
2. Developer includes the JWT file in their npm package
3. Server resolves the package from npm, reads the claim file, verifies
the JWT signature, and attributes ownerWorkspaceId
New GraphQL mutations:
- generateNpmClaimToken(packageName) - returns a signed claim JWT
- verifyNpmPackageClaim(packageName) - resolves npm package, verifies
claim, creates/updates registration with ownership
Also adds claimForNpm and createFromNpmClaim methods to
ApplicationRegistrationService for the claim-specific registration logic.
Co-authored-by: felix <felix@twenty.com>
