[Pre-RFC] `cargo package` should include fewer files by default

bjorn3: > Dev-dependencies may not even be present in the normalized Cargo.toml. For example if you are using a path for a dev-dependency without also specifying a version. That should block publishing in my opinion, just as it would for normal dependencies.