let me `nix-thunk pack` more easily

cannot re-pack a thunk with unknown files in it
these files are known and are not meant to be committed