move exclutions to package.json

this means anyone building it downstream will also ignore those files