add top-level npm-debug.log to .gitignore

as it wasn't being picked up with the current '**/npm-debug.log' rule