Remove version bounds on dependencies.

I'm not entirely certain that there should be bounds at all, since we
should just be using the latest of everything in a sandbox, unless a
specific package is known to be broken.

Closes #128.
Add 'sandbox' target.
Update GHC version requirement in README.