Lock sucker punch at < 1.0

Sucker punch 1.0 isn't backwards compatible. Locking the dependency at <
1.0 until a proper update can be made.
Bump version to 0.9.4.