explicitly reject PKG.metadata.json files

$pkgname.metadata.json files are now generated by the builds. We need to
reject these from the collection of artifacts we upload.