Using tar and setting .gitignore as exclude file was causing all
non-toplevel .gitignore files to be ignored, and therefore some unwanted
files were making their way into the tarball.

Using git-archive ensures that only the files under VCS will be
archived.