Updated HACKING.md to more closely resemble reality

HACKING.md is out-of-date.

* It said securedrop relies on precise, but now it relies on trusty
* Vagrant technically starts two VMs, not one
* We require vagrant-hostmanager and ansible to be installed to work at all, but this wasn't in the instructions
* I also fixed some formatting
@garrettr you are correct. The `vagrant box add` line isn't needed it will do it the first time you `vagrant up`