Introducing a CONTRIBUTING guide

The problem is that `go get` (both explicitly and transitively) will fetch GitHub's default branch. We want that to be the last stable release, not the current development branch. By keeping the two separate, we can control when changes are made available downstream.