Sanitized use of MVCC keys throughout the storage layer

Also documented MVCC design decisions.
Yeah, I thought same. OK, I'll add that to this change.