Corrected & in the nuspec file

The release notes from calibre included an & which I hadn't sanitised which failed the package process