maintain a .versions file in package source tree

for standalone packages only (packages in an app just use
.meteor/versions from the app)