Update to match README
Correction to some debug code
A first draft implementation of new linter wrong-pre-post

I want to check it in as it is now, since it seems useful.  However, I
also want to experiment with changing its implementation
significantly, using tools.analyzer(.jvm) to get more information
about preconditions or postconditions that are symbols, to know
whether they are local symbols or Vars.