The package manifest file is included in the package as defined in ../PackageFormat.
The format and contents of the manifest are defined at http://bazaar.launchpad.net/~click-hackers/click/trunk/view/head:/doc/file-format.rst, with particulars about the security section at SecurityTeam/Specifications/ApplicationConfinement/Manifest#Click.