pkg2: make package removal safer by moving deleted pkgs to `.trash`.