In order to exclude everything other than explicitly enumerated files, I ended up doing something like:
rsconnect write-manifest quarto . _quarto.yml index.qmd requirements.txt --exclude '**'
The ** and **/* glob syntaxes are not documented. Only * is explained.