Word around dependency cycle in benchmark

Criterion depends on cassava nowadays so if our benchmark depends on
both Criterion and the cassava library we get a dependency cycle. We
work around this by depending on the library sources instead of the
library itself in the benchmark.