chore: add .npmignore for npm publish