document commit-ish with GitHub URLs (fixes #6409)

Implement doc change suggested in issue 6409, explicitly mention
that commit-ish suffixes can be attached to github URLs in dependencies.