Add some common dotfiles to exclude.conf

Both of these typically don't have world read permission:
* .ansible/tmp - Ansible tmp dir
* .rnd         - Random seed file