Add "only-allow" to only allow pnpm to be used

[dtinth]

See: https://www.npmjs.com/package/only-allow

Also add .gitignore entries for npm and yarn please

[ryanrw]

@dtinth already add only-allow in package.json krub.

But I forgot to add entries in .gitignore