Add a DNSSEC tarball verification note from @jedisct1 in #51

download.libsodium.org vends DNSSEC-secured SHA256 hashes of release tarballs.