Move out `PackageStore::release()` from `PackageStore`

[xfbs]

The PackageStore has only one responsibility: that is storing packages. As such, it "owns" the data inside proto/vendor. It should not really be responsible for releasing packages.

For that reason, we should move out the logic for releasing packages into a separate module, perhaps the Package module.