add npmignore, set package to private, remove lib/ from gitignore