readme: document dependencies