Document that dependency_decisions.yml must be stored in version control