Add upper bounds to cabal package dependencies (second try)

Same pull request as https://github.com/idris-lang/Idris-dev/pull/1527 but without the spurious Cabal 1.18 requirement.