Do not expose pkg/scaffold

[estroz]

Problem
As per #160, specifically this issue comment, users are not going to need pkg/scaffold as a library, so it should not be exported.

Proposed fix
Move pkg/scaffold -> internal/scaffold.