Cartfile.private

Adds support for a `Cartfile.private` file, which can be used to record a project’s private dependencies (those that should not be considered by parent projects).

Resolves #125.

**To do:**

 - [x] Update documentation
Maybe we should stick either with _dependent_ or _parent_ across all docs? I'm leaning towards the latter.