Handle npm 12 array metadata

[JasonSmall]

Summary

Handle npm 12's real multi-field npm view --json response, which wraps the single package result in a one-element array.

Validation

• reproduced the exact npm 12.0.1 response from the public registry
• ran the corrected parser against that live response successfully
• preserves exact name, version, and integrity checks
• npm publish remained skipped in both failed verification runs; no publication was attempted