Sanitized use of MVCC keys throughout the storage layer

Also documented MVCC design decisions.
This is the same as the length of the second return value of DecodeBinary (`_`), right?