Update bounds on crypto-random and aeson

NixOS by default uses crypto-random 0.0.8 and aeson 0.8.0.0.  This seems to work fine.