doc: Document default `.npmignore`

Closes #3476 and #3480. Ref. #3474.

/cc @domenic