Add tighter cabal package bounds

Not for all packages, but for the ones where it seems like a good idea