support per-package visibility

this should support BUILD level and package level visibilities:

Edited by Darius Makovsky