Ignore /build/ and /dist/ in case a developer accidentally installs.
Add credential-checking test using local environment variables.