Makefile+README: add a setup-hermetic target and document what it does.
README: add a build status badge.