show package/resource revision_ids, disallow setting them

avoid a 500 server error on user sending a revision_id to package_update, and otherwise just do the right thing all the time with revision_id in packages and resources.