move HACKING.md and CHANGELOG.md to doc subdir

@phinze, you mentioned doing a toplevel cleanup.  These two seem safe to move, anything else?