Move package() up when safe

[keith]

If there are assignments above package() calls they could contain variables used in the package() call. We now check for that case so we can move it as far up as possible.

Fixes https://github.com/bazelbuild/buildtools/issues/1420