Implement -l/--list for `cargo package`

This provides a method of listing the files that will be in a package without
actually creating one.

Closes #855
For now `file` is always a child of `root` so the unwrap should in theory never fail. I'll switch to a collect though.