Add a section describing our ideal code review workflow

This both adds that code reviews before merging are expected,
and gives guidance for both the author and reviewer on what
to do.

Thanks to Edmund von der Burg, Matthew Somerville and Nick
Jackson for corrections and suggestions.