[Pre-RFC] `cargo package` should include fewer files by default

While it is something we can change, cargo add breaks tests for some workspace. To avoid the risk of workspace cycles and people figuring out how to break them, it starts with them broken by cargo add --dev --path not adding a version, causing it to be stripped on publish.