Add note about MELPA stable and package pinning to README