[meta] use npmignore to autogenerate an npmignore file

.gitignore

@@ -31,3 +31,5 @@ node_modules
 npm-shrinkwrap.json
 package-lock.json
 yarn.lock
+
+.npmignore

package.json

@@ -13,6 +13,7 @@
 	"license": "MIT",
 	"main": "index.js",
 	"scripts": {
+		"prepack": "npmignore --auto --commentLines=autogenerated",
 		"prepublishOnly": "safe-publish-latest",
 		"prepublish": "not-in-publish || npm run prepublishOnly",
 		"lint": "eslint --ext=js,mjs .",
@@ -52,6 +53,7 @@
 		"functions-have-names": "^1.2.3",
 		"has-strict-mode": "^1.0.1",
 		"in-publish": "^2.0.1",
+		"npmignore": "^0.3.0",
 		"nyc": "^10.3.2",
 		"safe-publish-latest": "^2.0.0",
 		"tape": "^5.6.1"
@@ -68,5 +70,10 @@
 		"call-bind": "^1.0.2",
 		"define-properties": "^1.1.4",
 		"es-abstract": "^1.19.5"
+	},
+	"publishConfig": {
+		"ignore": [
+			".github/workflows"
+		]
 	}
 }