Expand file list specs in package-build-package for a more convenient API

The expansion functions therefore become private once again.

See #1274.