bump commonplace: add `settings_package_*.js` to `commonplace includes` blacklist