Move from `.npmignore` to `files` for peace of mind
- See npm/npm#5082