Hide more packages from PAUSE (and other stuff)

re: https://github.com/miyagawa/carton/issues/83

Module::Metadata finds the fully-qualified version numbers, which is probably not exactly the same behavior as what PAUSE does - so arguable Module::Metadata should be rather fixed. But to be on the safe side, hide these packages in JSON wouldn't hurt.