Add .npmignore

[Bartvds]

Without .npmignore it will use .gitignore, but after we add a prepublish task we'd need to be more specific.

If you do npm pack it will create a tarball like it would publish so we can inspect what goes to npm. This also runs npm run prepublish, see #2