"make deploy" safer by default, require DESTHOST

this should avoid accidentally typing "make deploy" and triggering a deploy,
require DESTHOST instead and update README

Change-Id: I633a1aea460b444efde0cad589ac7d00a2c5daf3