1377 - Blacklist dependencies from SCM tracking

Git excludes dependencies from commit. 
Mercurial just shows a warning because it doesn't support excludes on commits. Just hgignore
Actually I would prefer doing that after the `clone()` - thus it may e.g. be placed at the end of `ensure_repo()`.