package deployment now bound to "package" lifecycle phase