only ignore `{flake,default}.nix` and `{.envrc,.direnv/}` in the root

this makes it so files in `src/nix-dev-shell` are *not* ignored, as they
should not be. note that `flake.lock` is still ignored globally.