updater: add the ability to exclude files via local/excludes.conf

original motivation is #742605 vs chromium-browser, but the feature is more
generally useful, e.g. to exclude stuff which is problematic legal-wise