Use the `files` directive instead of `.npmignore`

While `.npmignore` is a blacklist, `files` is a whitelist, which is much more maintainable.
Add some dotfiles