Add warning about the merkle-tree algorithm duplicate txid flaw

Lots of people read the Bitcoin Core codebase to learn more about crypto; better to warn about flaws explicitly so they don't blindly copy the code for other uses and create broken systems.

Example: https://www.mail-archive.com/bitcoin-development@lists.sourceforge.net/msg06219.html