only bundle meta-deps if the original bundle is in node_modules

A package in test/foo/ is not necessarily a 'bundledDependency', and shouldn't
be treated like one.

However, a package in node_modules/foo/ that is being bundled clearly IS a
bundledDependency, and needs its deps included, no matter what.