gddo-server: hide internal packages

List internal packages only underneath their direct parent
or whether is browsing the internal package themselves.

Change-Id: I856178b427de2486c17b8f162e64be62bded9272
Reviewed-on: https://go-review.googlesource.com/90855
Reviewed-by: Tuo Shan <shantuo@google.com>