Exclude component.json and .bowerrc from sdist

See https://trac.torproject.org/projects/tor/ticket/8506