Mention package-pinned-packages in README

Fixes #2