Add citation to semver.org

This document does not reference semver.org. In my experience, this standard is generally accepted for Javascript, Python, Ruby, Java, and generally reflects the practice of open source packages outside the Haskell ecosystem.

The only significant difference to me is our use of two digits for the major version number (and I don't really understand the origin of this or why it persists)