If I have some package, and it transitively depends on a file, is there a way to find out the chain that connects the two? If not, I might try and hack something.

I think https://www.pantsbuild.org/2.20/reference/goals/paths can do this

Winner. Moreover, I had that in my shell history, so obviously I knew it at some point. I'll update our internal docs. Ta!