Use 'files' property to limit npm package contents

Fixes #61.

Presuming `dist` is all that should be published, but #67 prevented me from being sure.
Let me know if there should be some other files included in the npm installation.