Add MANIFEST.in to exclude migrations from source tarballs

while onbasca is not deployed in any bwauth, there's no need to distribute migrations.