Add private flag to package.json

- Add private: true to package.json so we don't accidently get published
  on npm.