Exclude the private .coveralls.yml file from `npm publish`.