Remove the robots.txt when you're ready to go live.

Alternatively, password protect the folder to allow only yourself and your client to view it. Google won't be able to get to it then.