Issue 6409 - document commit-ish with github URLs

Implement doc change suggested in issue 6409, explicitly mention
that commit-ish suffixes can be attached to github URLs in dependencies.