add a pubspec so that we can pull this into the app and the website

+add a CHANGELOG.md to track user-facing changes.