Last cleanup for working package generation.

This makes two changes:
* Switch to a --root_package flag that we use for imports, which we elide if
  it's empty, and
* chmod the generated CLI.

Generated clients *should* work out of the box now.