Output package to target directory

This is a work in progress.  Looking for help into figuring out how to prevent the tarball from being deleted after verifying it.
This is blowing away `target/package`, not all of `target` (if that's what you're thinking)