Exclude incidental hidden files from release assets

[rickardvh]

Context

While consuming the first command-generation semver release from AW, the GitHub release asset list included an incidental default.gitignore artifact alongside the wheel and sdist.

Problem

The release workflow appears to upload everything under dist/*, including the hidden marker copied into the distribution directory by tooling. That makes the release page noisier and weakens trust that every asset is an intentional installable/checksum-bearing artifact.

Desired outcome

Release uploads should include only intentional package artifacts and any explicit provenance/checksum artifacts.

Acceptance

• Release workflow upload patterns exclude incidental hidden files such as .gitignore / default.gitignore.
• A release dry-run or workflow test proves only wheel/sdist and intentional metadata artifacts are selected.
• Existing package build behavior remains unchanged.

Source

Dogfooding finding from AW consuming command-generation v0.1.0 as a released package.