filter third_party and internal packages out of search

filters from search results, but still visible when browsing an index of packages or when accessed directly.

ref #169

possibly.

a "not zero" test would probably be more appropriate, in which case I should probably just test isExcludedPath directly rather than documentScore