perf: exclude files from npm tarball

Reduces the code we ship via NPM from 850 files down to 650.

Also resolves an issue where test files were being type-checked in downstream projects (resulting in errors for missing deps that were devdeps in EFSA).